Cybersecurity reporting for board members