What you should know about cyber risk