Provision should include
authentication
access control
data integrity
confidentiality
accountability
loss prevention and recovery.