Policies and procedures to assure proper operation of computer systems, including controls over data center and network operations, software acquisition and maintenance, and access security.