Regardless of where a threat to cybersecurity comes from, board members need to be clear on how their organisation’s data and infrastructure mechanisms are being protected.