Same old, same old. Company directors still scoring low on their understanding of cyber security.