Fear of cyberattacks has corporate directors on edge. CIOs must paint a realistic view of the company’s security posture and steer the conversation toward managing business risk.