Richard Clarke: Cybersecurity has a long way to go