Cyber Security should be a concern for each employee in an organization including the management. Effective way to educate employees on the importance of security and management intention on cyber security is by effective management of policies, standards, procedure and guidelines explaining each person's responsibilities for protecting IT systems and data.

Cyber Security Risks should be evaluated in light of probability of cyber threat materializing and the wide‐ranging of advers impacts of such an event. To adequately manage risks, the tolerable levels of risk and business impact must be known or conservatively estimated. Automating the risk identification, evaluation, mitigation and reporting gives a central management view to effectively manage such risks.

Organizations are required by law, regulators and standard bodies to be compliant to various rules and frameworks inorder to operate in the business domain that they are in. Non-compliance could lead to fines, law suite and damage to reputation. Therefore effective management of compliance is crucial and automation just does that.