Four Components of Cyber Risk Management