The volume and increased sophistication of threats to the security of corporate data and systems, combined with a tidal wave of well-intentioned experts—ranging from large management consulting firms to reformed hackers carrying a business card—have created a perfect storm of cybersecurity confusion and misinformation for companies of all sizes.

Corporate legal professionals seeking a rational and cost-effective means of managing risks related to data privacy and online security are required to decipher cybersecurity jargon and marketing hype, to make or influence high-stakes decisions based on that information, and to explain and defend those decisions in the corner office as well as the boardroom.