Some very simple steps for corporates to start to take cyber risk seriously.