3 low-tech steps to improve your cybersecurity risk management