01. Governance
Establish leadership accountability, assurance, and continuous risk management practices.
02. Security
Implement controls that protect people, premises, and information assets from compromise.
03. Systems
Apply secure configuration, access, and monitoring across network and endpoint environments.
04. Response
Ensure incidents are contained quickly and reviews drive ongoing security improvement.



