Businesses need to prepare for new EU cybersecurity rules or risk fines and executives being suspended