A Practice Note addressing key cybersecurity issues for in-house counsel's consideration. This Note also discusses proactive steps that in-house counsel can take to build a comprehensive information security program and protect their organizations before a cyberattack, data breach, or other cyber incident happens.