Cyber is proving to be the ultimate enterprise risk, encompassing not only information technology but also risks involving vendors, people, legal questions, and reputation, all while moving with stealth and a velocity that is extremely difficult to cope with. What often flies under the radar is the risk posed to companies that are not, in fact, the direct target of cyberattacks. For example, what was Maersk’s experience and response to the NotPetya cyberattack in 2017?