"Service, criticality and owner",Access and information flows,Checks and source evidence,Contract and responsibility review,"Continuity, concentration and exit",Gaps and mitigation,Approval and monitoring
,,,,,,