major legal risk for business is a cybersecurity breach (see the Technology and the Law box) that results in the disclosure of customers' and/or employees' personal information. The loss in sensitive health, personal identification, financial, and other information can result in great financial and reputational damage to the business. How can business use risk avoidance, risk reduction, risk transference, and risk retention in managing the risk of a cybersecurity breach?