“Hardware and software should be treated together, integrated with cybersecurity early and frequently.”