define-cybersecurity-plans conduct-risk-assessments validate-security-requirements train-internal-teams develop-security-audit-programs