In order to actualize our philosophy, we maintain a robust, enterprise-wide, risk-based security program, informed by the National Institute of Science and Technology (NIST) Cybersecurity Framework for Protecting Critical Infrastructure.