The law of unintended consequences: When companies are collateral damage in a cyberattack

Cyber is proving to be the ultimate enterprise risk, encompassing not only information technology but also risks involving vendors, people, legal questions, and reputation, all while moving with stealth and a velocity that is extremely difficult to cope with. What often flies under the radar is the risk posed to companies that are not, in fact, the direct target of cyberattacks. For example, what was Maersk’s experience and response to the NotPetya cyberattack in 2017?