Manage Organizations, Processes, Risks & Controls Develop & Publish Policies Assess Risks Monitor and Manage Compliance Activities Conduct Audits Manage Resources Track and Resolve Issues Track time