For DISA, managing cyber risks starts by prioritizing data, systems to protect