The Privacy Program factors reputation, compliance with laws and regulations, PI lifecycle process effectiveness, privacy incident levels and overall governance practices across the enterprise to determine the Programs risk level. POLICIES AND PROCEDURES Created through collaboration between industry and government, the National Institute of Standards and Technology’s (NIST) Cybersecurity Framework consists of standards, guidelines, and practices to promote the protection of critical infrastructure.