Watch this video on YouTube
You are the Information Security Manager of HDA Inc. You intend to document specifications outlining the essential security controls required for user workstations. What source would be MOST suitable for this task?