1 -Clause 8 Operation of the Management System
2 -Managing external vendors and service providers
3 -Supply Chain Risk Management
4 -Personnel Security - HR Security
5 -Security Awareness Training
6 -HR Policy
7 -Building Incident Response Program
8 -Operational Logs Management
9 -Threat Intelligence and CERT
10 -Network Security Management Policies
11 -Network Segmenation
12 -Firewalls
13 -Sandbox
14 -Content Filtering
15 -WAF
16 -SSL Decryption
17 -Network Access and BYOD Policies
18 -Internet Access, Email & Remote access Policy
19 -Patch Management
20 -Configuration Management
21 -Change Management
22 -Financial, Portfolio and Capacity Management
23 -Server, Software, Backup Policies
24 -Identity Access Management
25 -Privileged Access Management
26 -User Account, Password and Access Control Policies
27 -Data Lifecycle
28 -Data Classification
29 -Building Data Governance Program
30 -Data Protection Measures
31 -Data Leakage Prevention
32 -Digital Rights Management
33 -Data Protection, Encryption, Classification Policies
34 -Data Disposal
35 -Data Privacy Overview
36 -Privacy Policy
