In response to information security risk, the Risk Management Working Group summarizes patterns of potential losses, including loss of goodwill, interruptions to operations, data leakage, and ransomware.