governance framework for integrating security principles, practices, management and awareness into all aspects and all levels of the enterprise » Security baselines and configuration management in the design and management of business applications and the infrastructure » Information security architectures (e.g.,