Siber

Companies often don't decide to do it, though, until they really get in trouble. Even comanies have had a breach, and they've been flying by the sead of their pants,. Once it's all kind of over, everyone just says, i'll thank god. And then they all just turn their heads and go back to whatever they were focusing on before. But you know, i feel like it starts at the board level. Have quarterly risk and security assessments that report up to an audit committee. Have a separate data security committee or an audit committee that at least specifically entails that - and have experts on the board with siber.