, enhancements to multi-factor authentication, updates to the vulnerability management plan, and creation or revision of security... policies and procedures. Expanded Responsibilities Evaluate whether security controls are correctly designed and operating...