Cyber risk report for the board