Data Management — Takin’ Care of Info

• Physical controls are in place such as video monitoring equipment and limiting access to areas containing data.

• Identifying and controlling threats along with procedures for monitoring threats and documented action plans if a threat is encountered.

• Business continuity includes review of continuity practices and disaster recovery readiness.