Identifying data security risks and managing vulnerabilities Verizon’s enterprise-wide Information Security Policy is aligned with the National Institute of Standards and Technology’s (NIST) Framework for Improving Critical Infrastructure Cybersecurity (Version 1.1).