Minimum Cross-Cutting ObligationsThe hard core of practices that every application must meet, regardless of risk level