South African risk managers rank cyber incidents and business interruption above global averages.