In order for an IT security framework to meet information assurance needs, the framework needs to include policies for several areas. Which of the following is not one of the areas?

Group of answer choices

Automation of security controls, where possible

Implementation of appropriate accounting and other integrity controls

Calculations for risk appetite and risk tolerance

Assurance of a level of uptime of all systems