Cybersecurity risk management strategy outcomes are reviewed to inform and adjust strategy and direction