Organisations and governments are increasingly at risk of attack from cyber criminals seeking to exploit security vulnerabilities within information systems for financial gain, intellectual property theft or espionage. If successful, these attacks can subsequently cause serious commercial and reputational harm.