Engaging people more actively in cyber security