how to mitigate cybersecurity risks