How to mitigate cyber threats in a digital-first economy