Implementing a Cyber Security Management Framework