FAILURE TO IMPLEMENT ADEQUATE CYBER PROTECTION