US boards are strengthening their cyber security expertise in response to a rapidly changing regulatory landscape.