Security operations and controls

Backup/restore
Information security management system
Incident response management
Separation of duties
Disaster recovery and business continuity
Record management to assist certification and auditor
Visitors management