This document addresses potential risks that can apply to some electricity sector
organizations and provides practices that can help mitigate the risks. Each organization
decides for itself the risks it can accept and the practices it deems appropriate to manage
those risks.