4 steps to defend against cyber attack risk