Cyber threats create business risks rather than just technical ones