Smaller firms are less likely to protect CISOs from personal liability for security breaches, ‘which can deter highly ...