[System Engineering & Project Management] (*please DO NOT copy&paste from other posts)

You are a security information systems engineer and are establishing a new virtual private network (VPN) between two companies who wish to share information. Describe the 3 major types of information security controls and 2 examples of each that you would expect each company to be compliant with prior to establishing this connection. Explain how you would go about validating that both companies were in compliance with these controls before you allowed them to be connected. Also, briefly describe a VPN.