Why is the legal profession not coming forward and managing cyber risk.