These measures include a formal program to devalue sensitive and/ or personal data through various cryptographic means, embedded security in the software development lifecycle, identity and access management controls to protect against unauthorized access, and the development of advanced cyber detection and response capabilities.