Acquisition and implementation of a cyber risk management solution