A recent report fund that 93% of organizations made policy changes over the preceding 12 months to address concerns about personal liability for CISOs.