Systems and technology (security information and event management tools for incident and event reporting; a Security Operations Center providing automated attack/suspicious activity detection); protective controls effectiveness (red team, blue team, purple team mock security exercises, testing cyberattack vulnerability and assessing defensive capabilities).