| Key Assets | Implement Security Controls (NIST SP 800-53A) | Access Security Controls (NIST SP 800-53) |
| User login information and records | AC-2 Account management. PE-access control | Security Awareness |
| Backup storage | AC-1 Access control policy. PE-access control | Security Awareness, Access Enforcement |
| Cloud service | AC-8 System use notification. PE-access control | Security Awareness, Access Enforcement |
| Internet Service provider | AC-8 System use notification. PE-access control | Security Awareness, Access Enforcement |
| Policies and Procedures | AT-1 Security awareness and training policy and procedures | Security Awareness Training |