Investment by top management is cyber security is vital, and plunging them into the middle of a cyber attack is the best way to get their attention, says Marco Gercke, director for the Cybercrime Research Institute. “Getting top managers out of their comfort zones to feel the stress of making decisions in a cyber attack is a powerful teaching tool,” he told the Gartner Security and Risk Management Summit 2014 in London.