BEST PRACTICES FOR BUILDING A CYBERSECURITY STRATEGY