Overall enterprise information security framework
A coordinated plan across seven domains — network security, endpoint security, application security, data security, threat and vulnerability management, identity and access management, and security management and compliance — forming a security system that can be operated sustainably.