The news of the massive GDPR fines levied against British Airways and Marriott has gotten the attention of CIOs. More importantly CEOs, investors, and board members are rethinking cybersecurity, realizing that a security-first mindset in all aspects of the organization is critically important.