Cybersecurity Risk Assessment Part 2