This awareness and support is achieved through governance practices, including but not limited to providing cybersecurity updates to the Board of Directors and senior executives, establishing and leveraging an Executive Privacy and Security Council, and integrating cyber-related efforts into broader enterprise risk management practices .