BoD Series: How to prepare company boards for new cybersecurity rules