(Getty Images) From qualitative to quantifiable: Transforming cyber risk management for critical infrastructure Commentary