The program and information security risk assessment processes are aligned with the National Institute of Standards and Technology (NIST) cybersecurity framework, combined with fundamentals and concepts from the Factor Analysis of Information Risk (FAIR) methodology.