Comprehensive study of measures and controls to assure the confidentiality, integrity, and availability of information.