A great HBR update on cyber risk management.