Cyber security procurement