To focus effectively on the aspects of IT security with a risk-based and cyber security by design approach, the model has also equipped itself with a Cyber Security unit to define the strategies and IT security plans, the design, control, monitoring and dissemination of the awareness of IT risks.