Data breach/leak of protected informationControlQuarterly vulnerability scans of the network, with remediation