It seems that almost every day we hear reports of another cyber incident involving a data breach or ransomware attack impacting a business, school or local government. Cyber incidents are often the result of an escalating series of technical and non-technical failures which include lack of preparation, lack of adequate employee training designed to increase awareness of risky behavior and incomplete or non-existent evaluations and protections involving vendors and other third parties who receive valuable data from the organization. Through this practical and interactive session participants will work through the twists and turns of a series of hypothetical security incidents involving data theft, ransomware and data exposure and will learn about the following: (1) cyber best practices; (2) the importance of a proactive approach to cyber security; and (3) state and federal law issues associated with responding and reacting to a security incident.