due diligence: cybersecurity