cyber risk management for managed security provider