Executives realize that cybercrime is an existential threat to business, but increasingly they have something else to fear: that the Securities and Exchange Commission will lower the boom if their firms haven't taken adequate precautions or provided adequate disclosures related to those risks.