The Need for Cyber Risk Quantification