The SP establishes 32 common-sense principles to guide the development and oversight of a modern security and privacy program. The SP is sourced from the Secure Controls Framework (SCF), which is a...