My colleagues, Gerry Stegmaier and Eric Manski, shed light on the Federal Trade Commission's focus on personal liability for executives of companies that suffer data breaches.  As has been said many times, it is not "if" a company will have a breach, it's "when" they will have one.  As the stakes get higher, executives (and by extension Boards) need to prepare and be certain their efforts are focused and effective.