The traditional traffic light system used by chief information security officers (CISOs) to report cyber risks to boards is showing signs of strain. After interviewing more than 10 CISOs across Europe ...