Governance, ensure the organization has the right governance structures in place to enhance and maintain its preventive, detective and respond & recover security capabilities; assets; 3. Detection, ensure the organization is aware of the internal and external threats and can proactively mitigate them and 4. Response & Recovery, defend the organization against successful cyber attacks and recover from the impacts generated.