panel at our last workshop with ari, with my colleague, with michelle richardson from aclu, with harriet pearson, was about this topic and what we ended up doing for the final version was instead of having a separate appendix, i think stakeholders from both the privacy community and the business community said, given the mandate of the executive order, it would be much better if this was clearly about the privacy considerations when you're growing a cybersecurity program and the risks that could be out there to privacy and civil liberties windows programs are being built. so that's what we do in the section. the same sort of material, this is all about providing tools and resources to critical infrastructure, that's all still there in the document but it's in the context of how to use section so it's very clear that this is how you build a strong cybersecurity program, giving the really important linkages of those things. you can't have one without the other. the other thing that we've done, and we did this throughout, another big change with the document was we separated out a section called ar