SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT, PLANNING, SYSTEM AND INFORMATION INTEGRITY