How do you determine the attribution of a cyber attack, and when is attribution actually important to the business at AIG?
