The individual remains the first and last line of defence against cybercrime