Confronting Cyber Risk