Getting the basics right is a necessity for managing the complex cyber security environment.