— Governance Network Configuration and Management Asset Configuration and Management Logical Access Control Data Encryption Security Logging and Monitoring Security Incident Response Disaster Recovery