Countermeasures and their taxonomies for risk treatment in cybersecurity: A systematic mapping review