Tag Risk assessment in cybersecurity