IAO-03.2 - Adequate Security for Sensitive / Regulated Data In Support of Contracts
Mechanisms exist to protect sensitive / regulated data that is collected,
developed, received, transmitted, used or stored in support of the performance
of a contract.