Cybersecurity Compliance and Technical Risk Assessment