On May 12, the sort of cyber disaster security experts had warned about for years had finally happened, in its wake compromising everything from corporations to hospitals across the planet. But something else that had never happened started then, too—everyone paid attention. Considering the “numerosity and intensity and geographic spread of the attacks,” Day Pitney partner Jed Davis said, “this is the wake-up call, if people needed one before now.”

And that wake-up call, Davis added, needs to be heard on two fronts: “the need to take control of the overall risk management process, including backing up the crown jewels,” and improving security awareness.

But as with any cyber incident, what remains to be seen is whether organizations will see beyond usual platitudes and heed the advice of cybersecurity and information governance experts. When it comes to basic cybersecurity hygiene, “you can say it a hundred times, but that doesn't mean people listen to you,” said Alan Brill, senior managing director at Kroll Advisory Solutions. “If this is not a good wake-up call to tell you to [follow security protocol], I honestly don't know what is.”