A Capability-Centric Approach to Cyber Risk Assessment and Mitigation