Cyber risk index: a socio-technical composite index for assessing risk of cyber attacks with negative outcome