As cyber security incidents continue to escalate, cyber security frameworks (CSF) are becoming increasingly mandated to mitigate security risks. CIOs should prepare to select and implement a framework that is appropriate for their organisation.