IT:AD:Information Security Controls Validation Plan