The arc of development of cybersecurity and data privacy as core business issues is at its three-quarters turn, having gone from a pure IT issue only five years ago to local laws that regulatory agencies are enforcing. The final turn will be passage of a uniform federal law.