• Information security policy
• Organization of information security
• Access control
• Encryption
• Physical protections and safety of operational activities
• Communication and information systems
• Incident management and operational continuity