If you want to make the biggest impact in cyber security, follow the 80:20 rule.