The most expensive cyber mistakes I see at the executive level aren’t technical. They’re decisions that were framed wrong before the first dollar was spent.