How far are private actors allowed, expected, or even obligated to go when protecting themselves against cyber attacks and other malicious internet activity?

Cyberattacks to manipulate the integrity of financial data pose a distinct set of systemic risks.