HR and IT must partner together to manage cybersecurity risk, as employees are a major security vulnerability. By aligning goals, providing training, controlling data access, managing disclosures, and promoting a cybersecurity culture, organizations can better defend against cyberthreats.