— A5 A6 A7 A8

— Organizational Controls People Controls Physical Controls Technological Controls

— Preventive Corrective Detective Preventive, Corrective Preventive, Detective Detective, Corrective Preventive Detective Preventive, Detective, Corrective

— Governance (I) Identify Protect Detect Respond Recover Governance (I), Protect, Respond, Recover Governance (I), Protect Identify, Protect Identify, Protect, Detect Identify, Detect, Respond Protect, Detect Protect, Respond Protect, Respond, Recover Protect, Recover Detect, Respond Respond, Recover

— Confidentiality Integrity Availability Confidentiality, Integrity Confidentiality, Availability Integrity, Availability Confidentiality, Integrity, Availability