Being ill-prepared for a cybersecurity incident could cause chief privacy officer and chief information security officer or both of these leaders to lose their job.