The National Cyber Security Agency (NCSA) is planning to expand the enforcement of its standard framework of security requirements from the current 60 organisations of critical information infrastructure (CII) to 120 by the end of next year, said AVM Amorn Chomchoey, deputy secretary-general of NCSA.