Security and privacy incidents pose real risks to companies of any size and complexity.