– Audit measures

– Risk assessment and threat analysis

– Review system design

– Review effective implementation

– Business continuity and crisis preparedness

– Data protection and information security

– Antiterrorism assessment