Many businesses need to expand the number of in-house departments that focus on cybersecurity beyond IT, with an interdisciplinary group led by the chief financial officer dedicated to assessing and reducing cyberrisk, according to a new report released Monday.