So far, cyberattacks have had a limited impact on credit ratings. In the last 10 months, there were 50 negative credit ratings actions from S&P Global Ratings related to risk management, culture and oversight. A small subset of those actions was related to cyberattacks. Weak cybersecurity seems to be correlated with weak overall risk management. Inadequate cybersecurity or mitigation measures can potentially result in lower credit ratings than those of peers with similar financial metrics.