This document provides practices that can help mitigate the potential risks that can occur to
some electricity sector organizations. Each organization decides for itself the risks it can
accept and the practices it deems appropriate to manage those risks.