Criminal activities conducted via the internet, ranging from financial fraud to phishing scams, requiring CISOs to address both technical and human factors in security.