|
+03.15.01 Policy and Procedures |
03.15.01 Policy and ProceduresStatement
GuidanceThis requirement addresses policies and procedures for the protection of CUI. Policies and procedures contribute to security assurance and should address each family of the CUI security requirements. Policies can be included as part of the organizational security policy or be represented by separate policies that address each family of security requirements. Procedures describe how policies are implemented and can be directed at the individual or role that is the object of the procedure. Procedures can be documented in system security plans or in one or more separate documents. Assessment objectivepolicies needed to satisfy the security requirements for the protection of CUI are developed and documented. Assessment objectivepolicies needed to satisfy the security requirements for the protection of CUI are disseminated to organizational personnel or roles. Assessment objectiveprocedures needed to satisfy the security requirements for the protection of CUI are developed and documented. Assessment objectiveprocedures needed to satisfy the security requirements for the protection of CUI are disseminated to organizational personnel or roles. Assessment objectivepolicies and procedures are reviewed {{ insert: param, A.03.15.01.ODP.01 }}. Assessment objectivepolicies and procedures are updated {{ insert: param, A.03.15.01.ODP.01 }}. Assessment method
Assessment method
1. Преглед
1.1 Препратки1.2 Идентифицирани изисквания1.3 Свързани регулации2. Идентифицирани изисквания
3. Свързани регулации
Свързани задачи |