Similarly, the central information protection group at the utility was required to approve all new applications to indicate that risks had been adequately considered.
A risk management and risk assessment outline is required as part of the application.