Draft cyber security policy sections