Staged cyber schemes may help shore up 'weakest link'