This document presents the objective of Work Package 3 and its scope within Hermeneut, defines cyber risk and explores different approaches to managing cyber risk. It also considers economic implications of cyber risk and how to evauate its economic impact.