Scary. Can directors and management of a company be personally liable for a cybersecurity attack on their watch? Recent charges filed by the SEC against a company and its former CISO suggest that that the answer may be “yes”.