For cyber leaders, cyber risks are becoming personal.In 2023, new US rules around the disclosure of data breaches heaped more pressure on companies’ security staff — in particular, chief information security officers (CISOs) — just as agencies and courts were signalling that individuals could be held liable for incidents.Last year, for example, Uber’s former chief security officer, Joe Sullivan, was sentenced by US authorities to three years’ probation and fined $50,000 for covering up a data br...