Cyber Risk Assessment and Framework Compliance