User responsibilities and managing system/application access.
Inventory of assets and acceptable use.
Security in lifecycle processes.
Reduces vulnerability to cyberattacks and data loss. ISO/IEC 27002:2013