How Businesses Can Evaluate Cybersecurity Posture to the Best of their Ability