Implement internal control, security and auditability measures during configuration, integration and maintenance of hardware and infrastructural software to protect resources and ensure availability and integrity. Responsibilities for using sensitive infrastructure

components should be clearly defined and understood by those who develop and integrate infrastructure components. Their use should be monitored and evaluated.