The Only Number that Matters in Cybersecurity