This article explains why CEOs should act now to get ahead of personal liability (civil or criminal) for cyber attacks on their companies.