2. Vulnerability Management—Identification, measurement and
remediation of specific vulnerabilities
3. Adherence to Security Standards and Policies for Development and
Deployment—Prevents the introduction of vulnerabilities