Cyber security has become a serious concern no matter what sector or industry a company operates in. Technologies developed to facilitate security had become secondary, and cost and ease of user convenience became the primary decision-maker over security. Cybercriminals target this gap to exploit, identify, and attack organisations and individuals. They have the potential to seriously harm an organization's finances, reputation, and computer network. A solid digital foundation & process need to increase opportunity and manage risk, which is responsible for safeguarding the assets they hold, maintaining the services they provide, and incorporating the appropriate level of security into the products & services they sell. Businesses and organisations must understand that they are liable for the consequences if they are the victim of a cyber attack.