Cyber security based on ISO/IEC 27032