Implementation of security controls