A business-environment risk in which exposure to external cyber threats and insider misconduct is increasing as cloud service use expands and remote work becomes established. The focus is not on specific information leaks or system outages, but on the expansion of threats driven by the shift to cloud-based operations and telework, and the resulting need for countermeasures.