Configuration Management Plan SG.CM-11 Organizational Continuity of Operations Policy and SG.CP SG.CP-1 Procedures Organizational Continuity of Operations Plan SG.CP-2 Organizational Continuity of Operations Roles and SG.CP-3 Responsibilities Organizational Continuity of Operations Training SG.CP-4 Organizational Continuity of Operations Plan Testing SG.CP-5 Organizational Continuity of Operations Plan Update SG.CP-6 Organizational Alternate Storage Sites SG.CP-7 Organizational Alternate Control Center SG.CP-9 Organizational Identification and Authentication SG.IA SG.IA-1 Policy and Procedures Organizational Identifier Management SG.IA-2 Organizational Authenticator Management SG.IA-3 Organizational Information and Document SG.ID SG.ID-1 Management Policy and Procedures Organizational Information and Document Retention SG.ID-2 Organizational Information Handling SG.ID-3 Organizational Information Exchange SG.ID-4 Organizational Automated Labeling Low value for SA, Not SG.ID-5 selected in NISTIR Incident Response Policy and SG.IR-1 SG.IR-1 Procedures Organizational Incident Response Roles and SG.IR-2 Responsibilities Organizational Incident Response Training SG.IR-3 Organizational Incident Response Testing and SG.IR-4 Exercises Organizational Incident Handling SG.IR-5 Organizational Incident Monitoring SG.IR-6 Organizational Incident Reporting SG.IR-7 Organizational Incident Response Investigation and SG.IR-8 Analysis Organizational Corrective Action SG.IR-9 Organizational
SG.CM-11 Configuration Management Plan Organizational SG.CP SG.CP-1 Continuity of Operations Policy and Procedures Organizational SG.CP-2 Continuity of Operations Plan Organizational SG.CP-3 Continuity of Operations Roles and Responsibilities Organizational SG.CP-4 Continuity of Operations Training Organizational SG.CP-5 Continuity of Operations Plan Testing Organizational SG.CP-6 Continuity of Operations Plan Update Organizational SG.CP-7 Alternate Storage Sites Organizational SG.CP-9 Alternate Control Center Organizational SG.IA SG.IA-1 Identification and Authentication Policy and Procedures Organizational SG.IA-2 Identifier Management Organizational SG.IA-3 Authenticator Management Organizational SG.ID SG.ID-1 Information and Document Management Policy and Procedures Organizational SG.ID-2 Information and Document Retention Organizational SG.ID-3 Information Handling Organizational SG.ID-4 Information Exchange Organizational SG.ID-5 Automated Labeling Low value for SA, Not selected in NISTIR SG.IR-1 SG.IR-1 Incident Response Policy and Procedures Organizational SG.IR-2 Incident Response Roles and Responsibilities Organizational SG.IR-3 Incident Response Training Organizational SG.IR-4 Incident Response Testing and Exercises Organizational SG.IR-5 Incident Handling Organizational SG.IR-6 Incident Monitoring Organizational SG.IR-7 Incident Reporting Organizational SG.IR-8 Incident Response Investigation and Analysis Organizational SG.IR-9 Corrective Action Organizational