Alignment of organizational

$($e$.$g$.,$ management risk culture, risk assessment, and risk response$).$

Establishment of

and

$($e$.$g$.,$ updating and reviewing policies frequently, making procedure documentation easily accessible, and having policies relate to critical areas of organization$).$

Effective organizational

$($e$.$g$.,$ encouraging interaction in all directions$$not just $$top$-$down$$to promote an open culture and information accessibility$).$

Strategy designed to include an IT

that supports and promotes the organization$$s success. This $($same word$)[$infrastructure$]$ should be reviewed and updated as needed, with proper

and

to allow the business to function effectively.

Accurately documented processes that are

and

$($e$.$g$.,$ the organization$$s disaster recovery$/$ business continuity plan$).$

Proper asset management to include the

and

of assets within the organization $($e$.$g$.,$ mobile devices and software licenses$).$