Beyond products and services, cyber security industry needs to push innovation