Security and Privacy: advanced persistent threats, audit & accountability, awareness training & education, continuous monitoring, maintenance, planning, risk assessment, security controls
Laws and Regulations: Federal Acquisition Regulation, Federal Information Security Modernization Act