The riskiest position for a company to take when it comes to its cyber governance, risk, and compliance (GRC) practices is the attitude that “it could never happen to us.” The truth is, risk is everywhere