Assesses cybersecurity risks and recommends mitigations.