‘‘security’’

includes, but is not limited to—

(a) physical security of critical infrastructure;
(b) personnel security at critical infrastructure;
(c) contingency plans applicable to critical infrastructure; and
(d) measures aimed at protecting critical infrastructure;