The studies range from self-assessments to independent third-party analysis and compare our program using frameworks such as the NIST Cybersecurity Framework and the Center for Internet Security Top 20 Critical Security Controls.