More information on security controls can be found in: Appendix B: Mandatory Procedures for Information Technology Security Control of the Directive on Security Management Protecting Your Organization ...