We define information and cyber security risk as the risk that a security incident could impact the confidentiality, integrity or availability of the firm customer, colleague or proprietary information.