Chris Davies: Practical steps to curb cyber-security risk