Computer security : six questions you should ask your CIO