Addressing business risk requires identifying cyber risk. Involving C-suite in cybersecurity discussions is good digital stewardship & good leadership.
Compliance is vital. But when it justifies the status quo, a compliance-only approach to cybersecurity can be counterproductive. However, the adoption of a risk management approach can be the most useful to enterprise cybersecurity teams.