Summary – Increasing interconnectivity, globalization and “commercialization” of cyber crime are driving greater frequency and severity of cyber incidents, including data breaches. Data privacy and protection is one of the key cyber risks and related legislation will toughen globally. More notifications of, and significant fines for, data breaches can be expected in future. Legislation has already become much tougher in the US, Hong Kong, Singapore and Australia, while the European Union is looking to agree pan-European data protection rules. Tougher guidelines on a country-by-country basis can be expected. Attacks by hackers dominate the headlines but there are many “gateways” through which a business can be impacted by cyber risk. Impact of business interruption triggered by technical failure is frequently underestimated compared with cyber-attacks. Vulnerability of industrial control systems (ICS) to attack poses a significant threat. To date there have been accounts of centrifuges and power plants being manipulated. However, the damage could be much higher from security sensitive facilities such as nuclear power plants, laboratories, water suppliers or large hospitals.”