Essential elements for devising a cybersecurity strategy in 2025