Centralised IT Structure and Cyber Risk Management