This article explains exactly how CEOs can be held civilly--and in some cases criminally--responsible for damage resulting from cyber attacks on company computer systems.