Cybersecurity risk must be actively managed with proactive steps