Common criteria series CC5: choosing control activities that reduce risk, general controls over technology, and deploying controls through policies and procedures.
Selecting and developing control activities that reduce risks to acceptable levels: tying controls to the risk assessment, mixing control types, applying them at the right level, and addressing segregation of duties.
Selecting and developing general control activities over technology: controls over infrastructure, security management, and technology acquisition, development and maintenance that support automated business processes.
Deploying control activities through policies that set expectations and procedures that put them into action: ownership, timely performance, competent staff, corrective action, and periodic reassessment of policies.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.