This Note discusses common cyberattack scenarios and sets out actions that companies can take to prevent and respond to attacks, including developing a cyber incident response plan. It also addresses the chief compliance officer's role in preventing and containing attacks and making law enforcement referrals, and civil and criminal actions companies can pursue against attackers.