Cyber Risk Assessment Perform a general cyber risk assessment, often using the NIST CSF or CIS-18 framework. Other frameworks available.