Window to the Law: Creating a Cybersecurity Program