adhere to stated policy follow policies designed to minimize the risk of hacking or phreaking maintain regulatory compliance prevent or minimize toll fraud mitigate third-party risk minimize governance risk[13][14]