Covering physical assets and threats and people-related factors, cyber security is just one part of the wider field of information security. It is the “cyber” part of the term that is taking an increasingly high profile in the current context of the growing threats to critical national infrastructure such as power plants from certain countries. Most organizations will not be at risk from the incursions by state-sponsored agents and this is quite true. It is here that the consultants for cyber-security can play a part as they may still be the target of an opportunistic amateur hacker.