“While cyberattacks are inevitable, negative business impact is not.”