Compliance theater doesn’t build trust; only hard evidence that security holds under pressure turns cybersecurity into a board-level value driver.