“You don’t need to be an IT security expert” to mitigate cyber risk, ship crews told