Hybrid Information Systems Risk Assessment