Top 10 internal controls to mitigate cybersecurity risks