cyber security questions to ask employees