8.20 Networks security (A.13.1.1)

8.21 Security of network services (A.13.1.2)

8.22 Segregation of networks (A.13.1.3)

8.23 Web filtering

8.24 Use of cryptography (A.10.1.1, A.10.1.2)

8.25 Secure Development life cycle (A.14.2.1)

8.26 Application security requirements (A.14.1.2, A.14.1.3)

8.27 Secure system architecture and engineering principles (A.14.2.5)

8.28 Secure Coding

8.29 Security testing in development and acceptance (A.14.2.8, A.14.2.9)

8.30 Outsourced development (A.14.2.7)

8.31 Separation of development, test and production environments (A.12.1.4 / A.14.2.6)

8.32 Change Management (A.12.1.2 / A.14.2.2 - A.14.2.4)

8.33 Test information (A.14.3.1)

8.34 Protection of information systems during audit testing (A.12.7.1)

8.15 Logging (A.12.4.1, A.12.4.2, A.12.4.3)

8.16 Monitoring activities

8.17 Clock synchronization (A.12.4.4)

8.18 Use of privileged utility programs (A.9.4.4)

8.19 installation of software on operational systems (A.12.5.1, A.12.6.2)

8.10 Information Deletion

8.11 Data Masking

8.12 Data leakage prevention

8.13 Information Backup (A.12.3.1)

8.14 Redundancy of information processing facilities (A.17.2.1)

8.9 Configuration _Management

8.7 Protection against malware (A.12.2.1)

8.8 Management of technical vulnerabilities (A.12.6.1 / A.18.2.3)

8.6 Capacity Management (A.12.1.3)

8.2 privileged access rights (A.9.2.3)

8.3 Information access restriction (A.9.4.1)

8.4 Access to source code (A.9.4.5)

8.5 Secure authentication (A.9.4.2)

8.1 User Endpoint devices (A.6.2.1 / A.11.2.8)