How to Figure out an Effective Cyber Security Strategy?