Companion Document to the GFCE-Meridian Good practice guide on Critical Information Infrastructure Protection for governmental policy makers