How do you prioritize security initiatives in a resource-constrained environment at New York Power Authority?