30CP Compliance with requirement to undertake cyber security exercise