One cyber chief suggests that IT leaders focus greater attention on improving cybersecurity risk management.