Mechanisms exist to conduct specialized assessments for: ? Statutory, regulatory and contractual compliance obligations; ? Monitoring capabilities; ? Mobile devices; ? Databases; ? Application security; ? Embedded technologies (e.g., IoT, OT, etc.); ? Vulnerability management; ? Malicious code; ? Insider threats and ? Performance/load testing.