Lowering Cyber Risk