• Any specific frameworks of threat detection
• The current policies, processes and initiatives in place
• The suitability of these controls
• References in harvard style for the above