Cyber security planning and management – research