Browsing: third-party cyber security risk