a breaches. 
1.2 Controls 
CCM DG-04: Data Governance - Retention Policy 
CCM DG-05: Data Governance - Secure Disposal 
CCM DG-06: Data Governance - Non-Production Data 
CCM DG-07: Data Governance - Information Leakage 
CCM DG-08: Data Governance - Risk Assessments 
CCM IS-18: Information Security - Encryption 
CCM IS-19: Information Security - Encryption Key Management 
CCM SA-02: Security Architecture - User ID Credentials 
CCM SA-03: Security Architecture - Data Security/Integrity 
CCM SA-06: Security Ar