Measuring the efficacy of cybersecurity strategies