CP-2 (5) What is the solution and how is it implemented? CP-2 (8) (M) (H) The organization identifies critical information system assets supporting essential missions and business functions. CP-2 (8) Control Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , CP-2 (8) What is the solution and how is it implemented? CP-3 Contingency Training (L) (M) (H) The organization provides contingency training to information system users consistent with assigned roles and responsibilities: Within [FedRAMP Assignment: ten (10) days] of assuming a contingency role or responsibility; When required by information system changes; and
CP-2 (5) What is the solution and how is it implemented? CP-2 (8) (M) (H) The organization identifies critical information system assets supporting essential missions and business functions. CP-2 (8) Control Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , CP-2 (8) What is the solution and how is it implemented? CP-3 Contingency Training (L) (M) (H) The organization provides contingency training to information system users consistent with assigned roles and responsibilities: Within [FedRAMP Assignment: ten (10) days] of assuming a contingency role or responsibility; When required by information system changes; and
FedRAMP-SSP-High-Baseline-Template.docx