Annex A.12 - Operations Security

Operations security: This control requires organisations to ensure that their information processing facilities and related assets are operated and maintained in a secure manner.