Applies major frameworks and control catalogs to assess maturity, select safeguards, map requirements, and communicate a defensible security posture.