Addressing Human Error through Effective Cyber Policy Design