According to the survey , 75 percent of respondents stated that cyber security policies and procedures ( and documentation ) is included as one of the components for cyber security risk assessments in their organizations .