Navigating IT Cyber Risks: A Proactive Assessment Approach