Establishing governance, policies, mechanisms, and methods that must be adhered to in order to implement and protect the entity from the legislating which is the Cybersecurity Authority.