Ultimately the Board needs to take responsibilityif you can't make money out of cyber security in this environment, you shouldn't be in business