11 Physical & Policy: Environmental Protection [PE-1] Procedure(s): 12 Personnel Security Policy: Procedure(s): 13 Risk Assessment [RA-1] Policy: Procedure(s): 14 System & Services Policy: Acquisition [SA-1] Procedure(s): 15 System & Policy: Communications Protection [SC-1] Procedure(s): 16 System & Information Policy: Integrity [SI-1] Procedure(s): 17 Planning [PL-1] Policy: Procedure(s): For any family with a policy or procedure gap, please describe the gap below. Table 4-10. Missing Policy and Procedure Elements Missing Policy and Procedure Elements The Vendor must answer the questions below. Table 4-11. Security Awareness Training Describe capability, supporting evidence, and any Question Yes No missing elements Does the VENDOR train personnel on security awareness and security responsibilities?
11 Physical & Environmental Protection [PE-1] Policy: Procedure(s): 12 Personnel Security Policy: Procedure(s): 13 Risk Assessment [RA-1] Policy: Procedure(s): 14 System & Services Acquisition [SA-1] Policy: Procedure(s): 15 System & Communications Protection [SC-1] Policy: Procedure(s): 16 System & Information Integrity [SI-1] Policy: Procedure(s): 17 Planning [PL-1] Policy: Procedure(s): For any family with a policy or procedure gap, please describe the gap below. Table 4-10. Missing Policy and Procedure Elements Missing Policy and Procedure Elements The Vendor must answer the questions below. Table 4-11. Security Awareness Training Question Yes No Describe capability, supporting evidence, and any missing elements Does the VENDOR train personnel on security awareness and security responsibilities?