Worse yet, management often does not realize the threats could truly damage the company's reputation and livelihood. (According to the Los Angeles Times, the cost of this year's data breach from Veterans Affairs could top $500 million.) Therefore, if the government or other regulators do not require specific measures or legal protection, management ignores the risks and refuses to empower IT direct