IR-8 PR.IP-7 Incident Incident Response Plans must be reviewed annually and updated when Deliverable Annually PR.IP-9 Response Plan necessary IAW CIO-IT Security-01-02, Response” and GSA’s (Incident “Incident DE.AE-3 Security Program Plan”. Response “Information DE.AE-5 Plan) RS.RP-1 RS.CO-1 RS.CO-2 RS.CO-3 RS.CO-4 RS.AN-4 RS.IM-1 RS.IM-2 RC.RP-1 RC.IM-1 RC.IM-2 PL-2 PR.IP-7 System Security System Security Plans must be reviewed annually and updated when Deliverable Annually DE.DP-5 Plan necessary IAW CIO-IT Security-06-30, Enterprise Risk”. (SSP) “Managing AR-2 N/A Privacy Impact PTAs/PIAs must be reviewed annually and updated when necessary IAW the Deliverable Annually and Risk ISPP and GSA Privacy Program requirements. (PTA/PIA as Assessment required)
IR-8 PR.IP-7 PR.IP-9 DE.AE-3 DE.AE-5 RS.RP-1 RS.CO-1 RS.CO-2 RS.CO-3 RS.CO-4 RS.AN-4 RS.IM-1 RS.IM-2 RC.RP-1 RC.IM-1 RC.IM-2 Incident Response Plan Incident Response Plans must be reviewed annually and updated when necessary IAW CIO-IT Security-01-02, “Incident Response” and GSA’s “Information Security Program Plan”. Deliverable (Incident Response Plan) Annually PL-2 PR.IP-7 DE.DP-5 System Security Plan System Security Plans must be reviewed annually and updated when necessary IAW CIO-IT Security-06-30, “Managing Enterprise Risk”. Deliverable (SSP) Annually AR-2 N/A Privacy Impact and Risk Assessment PTAs/PIAs must be reviewed annually and updated when necessary IAW the ISPP and GSA Privacy Program requirements. Deliverable (PTA/PIA as required) Annually