For boards and management teams, the deeper issue is not the technology headline. It is whether the organisation can clearly evidence how it understands its systems, suppliers, critical processes, data pathways, control environment and escalation triggers.