where the are some processes in place that allow somebody to direct themselves or others when cybersecurity risks occur