Boards of directors are comfortable monitoring operational risk and fraud, but managing cyber risk is a totally different animal, finds a new study.
