10 steps to cyber security Risk management regime. Assess the risks to your organisation's information and systems by embedding an appropriate risk management regime. ... Secure configuration. ... Network security. ... Managing user privileges. ... User education and awareness. ... Incident management. ... Malware prevention. ... Monitoring. More items...