Personnel Security Policies and Procedures: Vendor, Consultant, and Contractor Agreements and Controls: Privacy Policy Requirements: Security Governance: Risk Management Concepts: Risk Assessment/Analysis: Countermeasure Selection and Implementation: Types of Controls: Continuous Improvement: Risk Frameworks: Security Awareness, Education, and Training: Manage the Security Function: