Extra securities involve areas of security that do not directly prevent, detect or recover. Extra security are areas such as policy, training, promoting security awareness and other areas of security that involve improving security in an indirect manner.

Extra
Staff Management
Training
Maintenance, Updates & Patching
Policy
Awareness Promotion
ISO 27001