Cybersecurity risk is a major concern for companies of all sizes and industries. But who should own the responsibility of managing cybersecurity risk within a company?