Some of the key objectives of the programme are: • to implement effective measures and controls; • increase levels of end-user education and threat awareness; and • provide continuing assurance toward reduced risk levels and increased compliance.