A.5.h WT6 The security manual identifies legal mandates for securing data, software, hardware, and communications.