Automating Cybersecurity Risk Management and Compliance