Leadership today must demonstrate that cyber risk is being governed, measured and reduced in a systematic way.