There’s a version of board cybersecurity oversight that looks great on paper and doesn’t work at all in practice. The CISO presents to the board once a quarter. The slides have charts, metrics, and a risk heat map. The board nods, asks a few questions, and moves on to the next agenda item. Everyone checks…