Operate
The operate phase begins once the program has been implemented to a sufficient degree. Various program elements require periodic upkeep, and this phase includes services analogous to CISO functions. Knowledge transfer, periodic assessment, and other activities occur to support program function.