PO.4.2 Implement processes, mechanisms, etc. to gather and safeguard the necessary information in support of the criteria.

Statement

Implement processes, mechanisms, etc. to gather and safeguard the necessary information in support of the criteria.

Example 1:

Use the toolchain to automatically gather information that informs security decision-making.

Example 2:

Deploy additional tools if needed to support the generation and collection of information supporting the criteria.

Example 3:

Automate decision-making processes utilizing the criteria, and periodically review these processes.

Example 4:

Only allow authorized personnel to access the gathered information, and prevent any alteration or deletion of the information.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final