CFOs and CISOs must be on the same page when it comes to cyber risk.