Personal cybersecurity rules