Why rising breach costs show cyber risk is now a governance challenge.