Three Areas to Consider, to Focus Your Cyber-Plan