We employ a comprehensive strategy for identifying and addressing data security risks that is aligned with the U.S. Commerce Department’s National Institute of Standards and Technology Framework for Improving Critical Infrastructure Cybersecurity.