—    PR – prevention

—    DR – deterrence

—    EL – elimination

—    IM – impact minimization

—    CR – correction

—    RC – recovery

—    AD – administrative

—    AW – awareness

—    DC – detection

—    MN – monitoring

—    std – policy

—    proc – security operation procedure

—    cert – certification or accreditation