If cyber security is the answer, then what is the question?