America needs to play both the short and long game in cybersecurity