Cybersecurity: Is your board leading by example?