Practical recommendations for the private sector on cyber hygiene