This section looks at general security practices followed in the organization. Notes/Comments" section. Include information such as how long it would take to apply a critical hot fix, what testing/certification procedures are followed, etc.
Based on the information in