—    PR – prevention

—    DR – deterrence

—    EL – elimination

—    IM – impact minimization

—    CR – correction

—    RC – recovery

—    AD – administrative

—    AW – awareness

—    DC – detection

—    MN – monitoring

—    std – standard / policies

—    proc – procedure

—    cert – certification or accreditation