How to reduce the risk and the harm of being hacked