After the SEC’s recent charges against SolarWinds, publicly traded companies need robust cybersecurity risk management.