Two myths stand in the way of boards understanding the threats posed by cyberattacks and ensuring their businesses can be safe against cyber criminals and hackers. First, too many organisations still believe that all cyberattacks are targeted, meaning that unless they’re specifically selected as the objective of a hacking campaign, they won’t fall victim.