By David Chaiken, Mark Ray and Brea Croteau (December 21, 2017, 12:48 PM EST) -- By now, it has become clear that virtually any type of organization could be the target of a large-scale computer-based data breach incident, from multinational corporations to local school systems. Indeed, many cybersecurity professionals accept the notion that, for nearly any entity, the question is when, not if, it will experience such an incident. Further, the consequences of these incidents can be significant, often triggering internal investigations, regulatory scrutiny, class action lawsuits, congressional inquiries, reputational harm, the departures of key executives, adverse media coverage, and, in at least one recent example, a $100,000 ransom payment.[1]...