Could human risk in cybersecurity be managed with a cyber-rating, much like credit scores help assess people’s financial responsibility?