A structured methodology used to evaluate and improve an organization's cybersecurity posture against complex threats. For thermal energy facilities, it ensures compliance with national security standards and identifies vulnerabilities in operational resilience.