Over the last five years, we have witnessed incredible change in the way that companies have organized themselves to address cyber risk. These critical corporate governance initiatives—from ensuring that directors with cybersecurity or technology expertise are on the board to creating board-level committees responsible for cyber-risk oversight to developing reporting structures between...