Policies and Procedures

Written policies and procedures, staff training, contingency planning, monitoring and policy review

Security Controls

Security controls including encryption, data integrity, authentication, backup/failover, auditing and logging

Security standards related to physical servers, media and employee access to production systems