Tag cyber risk assessment