How banks can limit the financial impact of cyberattacks