Cleared defense contractors: 10 steps to reduce cyber risk