Evaluating Cybersecurity and Data Privacy in CRE