Parsing the Cyber Security Policy