a few Steps to Cyber Risk Management