Like any crime, cyber risk will have neither a defined solution nor a concrete endpoint. There is no simple solution nor any fixed game plan. What senior management needs to do is develop corporate skills and capabilities—just as it does for marketing or other functions.