A new report reveals that many corporate legal teams are lacking in cybersecurity and the cost of a breach in those departments averages $8.9 million. The GC100 group has a membership of general counsel in large corporates are is warning its members that the first step to becoming cyber-secure is to ensure that current defenses meet the requirements of other parties; it says that contracts may specifically refer to levels or types of cyber security that is required by business partners. The group warns that some measures that may be necessary to achieve the required security levels may infringe on other issues such as employee privacy, as monitoring may be required. In conclusion legal departments are advised that they should be aware of current regulation and compliance internationally and ensure that third parties are also compliant.