Cyber-security enters boardroom