More than three quarters of CISOs are now worried about personal liability for security incidents, a sharp jump from last year when just over half expressed similar fears.