The first step in improving your cybersecurity is understanding your risk of attack.