Five-year plan in the works to revamp cyber security