How 2020 Changed Cyber Risk Management