Underpinning the program is the implementation of security best practices, such as the use of multi-factor authentication for remote access; privileged access management for system administrators; application whitelisting, laptop encryption, and advanced malware defenses on endpoints; and recurring phishing simulations to improve users’ security acumen and resistance to harm.