The issue has evolved from an IT concern to a risk management issue where everybody plays a role, writes cybersecurity adviser Noelle Brisson.