Entities supporting critical infrastructure components must implement a comprehensive set of physical and technical tools and practices.