How to invest and manage cyber security on a budget