ChecklistDOCXRisk assessment and treatment: verify treatment implementation and effect2 pagesRisk and assuranceRisk assessment
ProcedureDOCXSecure development lifecycle: source, dependency and build integrity3 pagesSecure developmentSecure engineering
ProcedureDOCXSecure configuration baseline: configuration control precedence2 pagesConfiguration managementSecure engineering
ProcedureDOCXRisk assessment and treatment: reassess changed or expired decisions2 pagesRisk and assuranceRisk assessment
ChecklistDOCXSecure configuration baseline: testable configuration requirements3 pagesConfiguration managementSecure engineering
WorksheetDOCXSecure configuration baseline: baseline profile management3 pagesConfiguration managementSecure engineering
ProcedureDOCXSecure configuration baseline: configuration deviations2 pagesConfiguration managementSecure engineering
ProcedureDOCXPrivileged access management: separate eligibility from activation2 pagesIdentity managementPrivileged access
FormDOCXRecords retention and disposal: assign record duties during closure, sale, and supplier exit2 pagesRetention and deletionSupplier and cloud services
ProcedureDOCXPrivileged access management: map the administrative path2 pagesIdentity managementPrivileged access