Cyber risks are increasing, and as a result, due diligence inquiries and valuations are increasingly focusing on the cybersecurity and privacy risks inherent in a business's collection, use, retention and disposal of data. Similarly, a business's information security posture and vulnerability to cyberattacks has become a key concern in corporate due diligence. Liabilities and assets are no longer just limited to a company's books but have more wide-reaching implications around possessing data and the ability to safeguard that data.