a non-profit enterprise whose mission is to help organisations reduce the risk of business and e-commerce disruptions resulting from inadequate technical security controls