Cybersecurity Q&A: ‘At the moment it’s an afterthought’