Assessing the Severity of Risk — RockCyber