Digital security report urges IT leaders to convince company boards that cyber security is a board-level problem.