Build trust with customers, protect their reputation
Define the governance, roles, and accountability
Implementation of cybersecurity measurement and controls
Audit traceability
Periodic risk validation and control effectiveness testing
Compliance maintained as an operational capability.