There are 10 steps to building a cyber security program including conducting a security risk assessment, selecting a cyber security framework, developing a cyber security strategy, developing a risk management plan, creating security policies and controls, securing your network, data, and applications, testing your security posture and evaluating/improving program effectiveness.