We are being targeted by hackers and we should understand the principles of cyber and information security to mitigate risks; review case studies and examples from federal agencies to identify vulnerabilities and help us develop strategies and policies to reduce exposure and protect systems, data, and client non-public personal information.