Advising on appropriate security controls, including; security solutions architecture; policies and procedure.