................... 2-1 
2.2 
EVIDENCE ............................................................................................................ 2-1 
2.3 
RELEVANT STANDARDS, BEST PRACTICES, AND CONTROLS ............... 2-1 
 
3 ORGANIZATIONAL INFRASTRUCTURE 
.............................................................. 3-1 
 
3.1 
GOVERNANCE AND ORGANIZATIONAL VIABILITY ................................. 3-1 
3.2 
ORGANIZATIONAL STRUCTURE AND STAFFING 
....................................... 3-3 
3.3 
P