A couple high-profile crash & burns will get their attention.
We do a lot of prevention and recovery testing.
So yes, it can happen.
I'm glad your CEO cares. It makes a difference and I hope you feel good about that. And the world would be a better place if more did care. But, to a first approximation, it seems like organizations don't care about data breaches.