While compliance with regulations is essential, cybersecurity should not be reduced to a checklist exercise. A security-first ...