Policies and Documents
Monitoring
App Security
Software Development Lifecycle
Automated tests and quality checks enforced
Infrastructure Security
Software Versions Updated
Backup Policy
Password Policy
Organization Security
Code Review Process
Disaster Recovery Plan
Incident Response Plan
Production Code Changes Restricted
Security Issues are Prioritized