Page 5: "The document enlists guidelines around basic security controls and is not prescriptive in nature. The readers are responsible for making their own independent assessment of the information in this document."