of scale • Identity and access management (IAM): implement processes and tools — starting with Privileged Access Management — to reduce the risk inherent in both internal privileged accounts and vendor access • Operations cyber program: apply a network segmentation strategy at operating sites to decrease the risk of threats between the operations technology and information technology Implementation of the initiatives began in will continue through 2022.