includes, but is not limited to—
| (a) | physical security of critical infrastructure; |
| (b) | personnel security at critical infrastructure; |
| (c) | contingency plans applicable to critical infrastructure; and |
| (d) | measures aimed at protecting critical infrastructure; |