Mickey suggests that knowledge is power when it comes to developing good cyber security practices for an organization. The first step is a security assessment to help determine the risks faced by your organization to help you determine the impact versus the likelihood of hack happening.