Risk Assessment Allstate’s risk-based approach to developing a holistic information security strategy leverages the National Institute of Standards and Technology (NIST) Cybersecurity Framework, with support from other standards and best practices.