4.9 Updated Risk NIST SP and Updated risk assessment documentation updates the Task TBD by Assessment risk assessment. It records threats, vulnerabilities Order Task (weaknesses), existing controls, probability, impact, COR Order and risk identified during a discussion with key system Reference personnel (e.g., System Owner, Authorizing Official, NIST site Information System Security Officer, Security for best Administrator, User, etc.). This effort relies on practices. knowledge of expert system personnel. Vulnerabilities identified during this process should be rolled into the independent assessment. If completed during system development efforts, modifications to the system should be made as applicable. 4.10 Briefing and Develop a set of briefing slides to summarize the Task TBD by Meeting support contents of a deliverable for presentation to agency Order Task staff. Provide staffing to present the briefing to the COR Order agency in-person or via telephone and or web conference briefing.
4.9 Updated Risk Assessment NIST SP and Updated risk assessment documentation updates the risk assessment. It records threats, vulnerabilities (weaknesses), existing controls, probability, impact, and risk identified during a discussion with key system personnel (e.g., System Owner, Authorizing Official, Information System Security Officer, Security Administrator, User, etc.). This effort relies on knowledge of expert system personnel. Vulnerabilities identified during this process should be rolled into the independent assessment. If completed during system development efforts, modifications to the system should be made as applicable. Reference NIST site for best practices. Task Order COR TBD by Task Order 4.10 Briefing and Meeting support Develop a set of briefing slides to summarize the contents of a deliverable for presentation to agency staff. Provide staffing to present the briefing to the agency in-person or via telephone and or web conference briefing. Task Order COR TBD by Task Order