Assess your current security posture 2. Identify your critical assets 3. Establish a baseline for what is normal and what is not 4. Implement a risk-based approach to security 5. Develop an incident response plan that includes the following: A) Contingency plans B) Communication plan C) Recovery plan D) Incident timeline E) Reporting process F) Risk assessment G) Security awareness training H) Training records I) Training records 6. Implement a security awareness program 7. Develop a security policy 8. Implement an incident response plan that includes the following: A) Contingency plans B) Communication plan C) Recovery plan D) Incident timeline E) Reporting process F) Risk assessment G) Security awareness training H) Training records I) Training records J )Training records K )Training records L )Training records M )Training records N )Training records O )Security awareness training P) Training records Q) Training records R) Training records S) Training records T) Security awareness training U) Security awareness training V )Training records W )Training records X )Training records Y )Security awareness training Z) Security awareness training 9. Implement a security monitoring program 10. Develop a security incident response plan that includes the following: A) Contingency plans B) Communication plan C) Recovery plan D) Incident timeline E) Reporting process F )Risk assessment G )Security awareness training H) Training records I) Training records J )Training records K )Training records L )Training records M )Training records N )Training records O) Security awareness training P) Training Records Q) Training Records R) Training Records S) Training Records T) Security Awareness training U) Security Awareness training V )Security Awareness training W X-Z) Security Awareness training