Suthsayers and snake oil salesmen not helping the cyber risk management cause.