Even though boards are painfully aware of the potential corporate exposure to a broad range of cyber-threats, value destroying breaches at major multinational corporations continue to be headline news almost every week. Fashioning a rational response to this highly complex issue remains a challenging matter for boards and management.