Guide to Developing a Cyber Security and Risk Mitigation Plan