A risk committee is mapping a security objective to the most appropriate control category. The rollout must use standard operational tooling. Operations staff must separate this topic from adjacent services when evaluating - Replication. Match each requirement to the correct service or concept.