Cyber risk management starts with the individual as well as the corporation.