Cyber Risk Made Simple