Advice whether you’re asking or being asked about your firm’s cybersecurity