Cyber security has many acronyms to measure success but are these still fit for purpose today?