Is it cyber security or cyber risk you should be focusing on?