CEOs' pay should be slashed if firms fail to protect against online attacks