Cybersecurity risk is fast becoming one of the top concerns of many businesses. Modern business is by nature interconnected and interdependent. Rapid developments in technologies and accompanying threats require engaged management to constantly and diligently learn and monitor just to keep up. This third article in our Cybersecurity & Singapore series discusses the legal liabilities that organisations and directors may face in respect of the organisation's failure to manage such cybersecurity risks, and ways that such liabilities may be mitigated.