Cybersecurity Incidents are growing across Colorado, and IT professionals are struggling to understand how to defend against increasingly sophisticated attacks. Many organizations know that they are not yet prepared for a significant cyber incident. In this session we will discuss recent cybersecurity incidents which have occurred in Colorado, what was the impact to the organization, and what lessons we can learn to improve our own preparation. We will talk about how risk management plays a critical role in preparing for a cyber attack. Finally, we will explore the planning and resourcing activities that IT professionals can use to develop an understanding of the risk and catalyze effective planning for the defense of their organization.