A Proactive Plan for Addressing Cyber Risk