Cyber risk in consumer business