Confusion over cyber-security