Corporate lawyers worry about liability exposure—and as ever more businesses generate or collect ever more data, those lawyers probably feel like their clients are mighty exposed these days.

Those fears are well placed. Information risk has transformed in the last decade, from something mostly in the orbit of the IT department, to an urgent concern for boardrooms, CEOs, IT security executives, and chief legal officers.