The ORF rules define the “Path to Operational Resilience” with seven steps: Implement an industry-recognized IT and cybersecurity control framework ...