Most people and organisations do not think seriously about cybersecurity until something goes wrong. An email is clicked, an account is compromised, systems are locked, or data is exposed. At that point, attention turns to fixing the problem as quickly as possible....