Cyber incidents are often discussed purely as a technology issue, but their consequences frequently extend into governance, regulatory and employment‑related territory. A serious cyber event can raise questions about whether directors and officers adequately oversaw cyber risk,