• PR – prevention
  • DR – deterrence
  • EL – elimination
  • IM – impact minimization
  • CR – correction
  • RC – recovery
  • AD – administrative
  • AW – awareness
  • DC – detection
  • MN – monitoring


  • std – standard / policies
  • proc – procedure
  • cert – certification or accreditation