A risk assessment of your organization’s security posture is the key first step towards approaching cybersecurity as a business risk.