"Similarly, in a hospital, the loss or destruction of patient data, or the unplanned shutdown of a critical system in an emergency room, could result in lawsuits or other litigation." . . . .