Why It's Important to have a Cyber Security Risk Assessment