

PR.DS-3: Data Security
Assets are formally managed throughout removal, transfers, and disposition.



PR.AT-5: Awareness and Training
Physical and cybersecurity personnel understand their roles and responsibilities.
Adequate capacity to ensure availability is maintained.
Assets are formally managed throughout removal, transfers, and disposition.
Data-in-transit is protected.
Data-at-rest is protected.
Physical and cybersecurity personnel understand their roles and responsibilities.