Risk Management Framework: A Lab-Based Approach to Securing Information Systems