An information security manager wants to document requirements detailing the minimum security controls required for user workstations. Which of the following re...