Information Security Risk Assessment Toolkit: Practical Assessments through Data Collection and Data Analysis