Assessment Framework for Cyber Security