Cyber risk is no longer confined to IT departments: it sits at the heart of business operations, exploiting trust, urgency, and routine.