Establishing objectives, exploring the risks, determining which controls to put into place and how to evaulate or assess those controls.
This Video is part of the “Applying Technology to GRC – The Big Picture” collection.
Next up: V20. What Not to Do.