*Understand data classification levels and how to identify such levels with assets. (Task ID: R3-9577)

*Understand data classification strategies in place. (Task ID: R3-9575)

*Communicate company policy for download and installing third-party software. (Task ID: R3-9728)

*Develop a policy which requires system administrators to follow company procedures related to download and install third-party software. (Task ID: R3-9721)

*Establish a basis or requirement for third party software before use. (What business purpose does it satisfy or why is it needed) (Task ID: R3-9732)

*Require personnel to sign acceptable use document agreeing that they will follow company policies for downloading and installing third-party software (Task ID: R3-9735)

*Require personnel to submit the use of proposed third party software to a governance body for review and approval. (Task ID: R3-9733)

*Access company policies and technical standards (Task ID: R3-9841)

*Communicate whenever an action is covered by a policy or technical standard (Task ID: R3-9843)

*Develop a process by which staff must acknowledge they have read and understand all applicable policies and procedures. (Task ID: R3-9848)

*Ensure policies, procedures, etc are in a well known and easy to access location. (Task ID: R3-9846)

*Review policies and standards that apply to work area (Task ID: R3-9713)

*Analyze cost of monitoring solution vs. features of of each solution to ensure maximum ROI. (Task ID: R3-9522)

*Establish a budget to handle the scope of an incident that might have the worst possible impact on your infrastructure and ensure that it is available in the case that something occurs. (Task ID: R3-9226)