There is a growing understanding by executives at firms operating in Asia of the many threats to their cyber security. But board-level awareness does not necessarily lead to the creation of effective frameworks to manage these perils