When the largest U.S. companies evaluate their digital risks, what do they fear most? The IAPP’s second annual study of the disclosure statements of the 150 largest publicly traded companies in the United States shows that 100 percent of these companies identify cyber attacks in their 2016 10-K reports as current and ongoing risks, up from 86 percent in reports led in 2015. Moreover, losing customers’ or employees’ personally identifiable information remains first among disclosed information-related risks. In this newly released "Privacy Risk Study 2017," free to IAPP members, the IAPP Westin Research Center takes a deep dive into risk reporting, with an additional annex providing sample language for various industries.
Full Story