Network Firewall Antivirus/Endpoint Protection Backup & Recovery System Security Monitoring/SIEM Incident Response Plan Identity & Access Management Data Encryption (at rest/in transit) Vulnerability Scanning Security Awareness Training Business Continuity Plan