Most board cyber updates look impressive but reveal little. Here’s how leaders can move from security theater to real resilience.