Tag cyber security risk assessment