Here are some steps security managers can take to deliver the information the executive suite needs to make better decisions on cyber security.