Creating A Baseline For An Effective Cybersecurity Program