Access control matrix. MFA for admin systems. Audit event capture. Vulnerability management. Incident response runbook.
Health checks. Uptime monitoring. Backup and restore plan. Change management.
Secret storage. Encryption in transit and at rest. Role-based access.
Deployment approvals. Automated checks. Evidence retention.
Privacy policy. Data rights workflow. Data minimization. Consent records.