I remember a conversation with... someone that one name that he was frustrated because the business, what he wanted to get done from a cybersecurity perspective just wasn't getting done. 

He would say that the business doesn't get it. I would turn around and say that the business doesn't know what it needs to do. 

They don't need to know cybersecurity. This objective, this mission is the job of of us as professionals to be able to bring them to the place that they need to be to manage this particular risk as a part of their business.