Governance and risk management (including policies and procedures, testing and monitoring, ongoing
evaluation/reassessment and adaptation to any business changes,
access rights and controls, data loss prevention tools and processes) incident response and disaster recovery planning, vendor management and due diligence, ongoing employee training

Assistance with developing an effective program to monitor communications, written policies and procedures and training regarding permitted platforms for communications, monitoring communications platforms, and record retention