---

Security

Cloud-native environments

• Incident response plan
• Security risk management plan
• System security plan
• System security plan (annex)
• Standard operating procedures

Hybrid environments

• Incident response plan
• Security risk management plan
• System security plan
• System security plan (annex)
• Standard operating procedures

Both environments

• Cloud assessment and authorisation alignment
• Continuous monitoring plan