Tips for investors, founders, and executives on evaluating cybersecurity programs at startups and acquisition targets