Changes in attack strategies and regulatory policies mean that Irish businesses need to build a process-based cyberdefence that pays attention to changing threats, writes Bob Griffin.