After a year full of cyber breaches, risk management professionals may want to take these lessons into the coming year.