This is relatively new verbiage in Washington, DC. It is peer review process that implements current practices established through research and development and 'trial application' proven to work. There is no experimental element to Best Practices. The research and development to these practices happens independently and does not effect day to day function of security no matter the venue. Setting research and development aside from established Best Practices reduces any risk to the security of those protected.