How to manage the risks of employing someone for a cybersecurity role, who has little or n