Domain 4: Implementation of Security and Privacy Controls