All CCAs shall follow good cybersecurity practice.