To ensure cybersecurity preparedness, boards need to transform their perception of cybersecurity governance into reality.