A company’s board of directors has fiduciary duties, including a duty to oversee all aspects of the company’s risk management efforts. This article will focus on how in-house counsel can help educate and engage the board of directors with regard to data security.