Obvious cybersecurity rule