The feasibility of cyber-risk management to ensure social good