Tagged cyber-risk-quantification