Design to reflect needs of forensics and disaster recovery
activities, and the ability to test for both
Implementation Automation of nightly code scans, application and database
vulnerability scans, and network and configuration scans