Text this: Event-based cybersecurity risk assessment: identifying potential cyber-attacks in organisations