Cyberattack: who is responsible?

Of course, the attacker's responsibility is not in doubt here; he is primarily liable. Nevertheless, the legal framework and standards may provide for conditions of liability (through negligence, for example) that could implicate employees of the victim company.

CISOs and CIOs, we invite you to consult Eric Barbry's white paper and recommendations to implement not only technological solutions, but also a framework to protect your legal liability.