38% of InfoSec professionals expect to be impacted to a great extent, compared to 29% of risk management professionals and 28% of IT professionals.