Following a string of high-profile data breaches and other cybersecurity failures, investors and regulators increasingly expect corporate directors to monitor cyber risk. But what does board oversight of cybersecurity look like in practice, and is it effective? In a recent …