cybersecurity contract strategy