How should banks and their regulators manage cyber risk? A new discussion paper from the CEPR sets out six principles from an economist's point of view. Anil Kashyap of the University of Chicago and Anne Wetherilt of the Bank of England tell Tim Phillips what they are recommending.