Requirements
governance Governance
Requirement to restrict system and data access based on defined roles, responsibilities, and the principle of least privilege.
technical Technical
Requirement to protect information from unauthorized or accidental alteration, erasure, or damage.
operational Operational
Requirement to detect, respond to, and recover from security incidents with defined procedures and communication plans.