• Identifying and assessing information security risks
  • Formulating and implementing incident response plans