; (B) identify areas where human behavior plays a critical role in maintaining or compromising the security of a system; (C) recommend— (i) changes to the design of devices, human-machine interfaces, technologies, tools, processes, or procedures to optimize security that do not require a change in human behavior; and (ii) training techniques to increase the capacity of employees to actively identify, prevent, or neutralize the impact of cyber attacks; (D) evaluate existing engineering and technical design criteria and guidelines that incorporate human factors research findings, and recommend criteria and guidelines for cybersecurity tools that can be used to develop display systems for cybersecurity monitoring, such as alarms, user-friendly displays, and layouts; (E) evaluate the cybersecurity risks and benefits of various design and architecture options for energy sector systems, networked grid systems and components, and automation systems, including consideration of— (i) designs that include both digital and analog control devices and technologies; (ii) different communication technologies used to transfer information and data between control system devices, technologies, and system operators; (iii) automated and human-in-the-loop devices and technologies; (iv) programmable versus nonprogrammable devices and technologies; (v) increased redundancy using dissimilar cybersecurity technologies; and (vi) grid architectures that use autonomous functions to limit control vulnerabilities