This note addresses key cybersecurity issues for in-house lawyer's consideration. It also discusses proactive steps that in-house lawyers can take to build a comprehensive information security program and protect their organisations before a cyber attack, data breach or other cyber incident happens.