practical assessments for cybersecurity grc professionals