John Strand & Wes Spencer discuss the Core Must Have Security Controls