In general, the trust models are not mutually exclusive. Each trust model may be used independently, as a stand-alone model, or in conjunction with another model (hybrid trust model). Several trust models may be used at times within the organization. Since electricity subsector organizations are diverse, it is possible that subordinate organizations may employ different trust models in establishing relationships with potential partnering organizations. The organizational governance structure may establish the specific terms and conditions for how the various trust models are employed in a complementary manner within the organization.
- Electricity Subsector Cybersecurity Risk Management Process, App. E, at 71.