“Think of cybersecurity as a strategic asset, not just a compliance requirement”