No business is immune to cyber risk