Stop Translating, Start Defending: Common Language For Managing Cyber-Risk