This presentation will examine various legal theories of liability and how they could apply following a successful cyber-attack. In particular, the presentation will focus on scenarios where companies that either provide cyber security services or technologies as well as victims of cyber-attacks could be held liable in civil trials after an attack. The presentation will also address how to mitigate such liability through the use of insurance and the SAFETY Act.