Hermeneut-cybersecurity-risk-assessment