- Develop data security policies using data security
standards, guidelines, and requirement that include
privacy, access, retention, disposal, incident management,
disaster recovery, and configuration
- Identify and document the appropriate level of protection
for data.