Data protection Data Classification Access Control Encryption and decryption Backup and disaster recovery Data Loss Prevention Data Retention and Disposal Security Awareness and Training Vulnerability Management Intrusion Detection and Prevention