Let’s set a foundation that every company must understand: data security is not solely an IT function. Don’t take my word for it — the National Association of Corporate Directors (NACD) Director’s Handbook on Cyber-Risk Oversight lists five (5) core principles that are applicable to board…