to mitigate a risk to the availability, integrity, reliability or security of the critical infrastructure asset.