Part

$2$

: Define a Security Policy Framework

For each risk, threat, or vulnerability in the list above, select an appropriate security policy that might help mitigate it

$.$

$$You can select one of the SANS policies or choose one from the following list.

Organize the security policies you selected so that they can be used as part of an overall framework for a layered security strategy.