How to Conduct Security Risk Assessments for Enterprise Environments: A Case Study on Reducing Cyber Threats by 85%