Portfolio management in cybersecurity programs