Identify risk
• Participate in risk mitigation activities
• Provide infrastructure, application, information and operational security
• Apply security controls to maintain confidentiality, integrity and availability
• Identify appropriate technologies and products
