Cybersecurity and regulatory exposure: key risk areas for