For decades, the procedures were simple. Guidelines, executive responsibility. Now a crop of fast-moving, AI-powered hackers are forcing a dramatic rethink.