"...given the level of threat and pervasiveness of the risk, cyber risk should be measured, monitored and reported on separately in the context of ratings from qualified cyber risk rating firms."
Wondering whether a mobile app is safe? There's a score for that. What about whether a business partner takes security seriously? There's a score for that, too.