Cyber-attacks are amongst the main security issues facing organisations in the information age. Today, all organisations operate with a potential information security risk and will need to implement strategies to protect their IT systems and data. Although society has become increasingly reliant on information technology and internet based services, cyber security skills and capability are not currently increasing at a comparable rate.