North Carolina's capture-the-flag exercise is extending cybersecurity concerns beyond the office of the chief information officer.