Cyber as a significant risk has been up there on the corporate agenda for a few years.