Cybersecurity Two Years Later-Measuring Progress