How governments can better defend themselves against cyberattacks