Strategic Security Planning Security Assessments and Authorizations Patch and Vulnerability Management Configuration Management Security Governance and Policy System Categorization Risk Management Concepts Continuous Monitoring Network Security Systems Development Life Cycle (SDLC) Incident Response/CND Contingency Planning Personnel Security HIPAA Compliance Public Key Infrastructure (PKI) Physical Environment Security Testing and Evaluation (ST&E) Personnel Security Security Testing and Evaluation (ST&E) Cloud Security Security Testing and Evaluation (ST&E) Validation Validators NQV Cybersecurity Auditing