In the last several years, cyberattacks affecting high-profile companies have received much publicity. Technology-related disruptions in the securities markets also have received significant publicity and resulted in enforcement actions. In combination, these events have put cybersecurity and technology risk at the forefront of the agenda of the U.S. Securities and Exchange Commission.