Communicating cyber-risk upward to C-suite and board takes simplification and better understanding of the audience.