Phase 3 – Controls

  • SSO, IAM roles & policies
  • WAF, CDN, TLS certs
  • Backup, DR, compliance