Risk-based Strategies for Avoiding Cyber Security Negligence