Security standards address applications, operating systems, networks, databases, web servers and other technologies, and cover disciplines such as cryptography, mobile security, cloud services, logical access control, change control, back-up and retention, disaster recovery, contingency planning and physical access and environmental control.