Cyber security certification roadmap