Implementation of Controls

Implement controls to protect information assets commensurate with the criticality and sensitivity of those assets, and undertake systematic testing.