... and operation of Information Security systems to ensure controls are adequate and effective. This ... recommendations to management Establishes plans and protocols to protect data and information systems against ...