The asset management industry can be proactive in managing cybersecurity risk through three key steps: form a response team and develop a plan; assign oversight and accountability; and encourage a system-wide security and privacy culture.