Part b Part c Part d Part e RA-5 (1) The organization employs vulnerability scanning tools that include the capability to readily update the list of information system vulnerabilities to be scanned. RA-5 (1) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Abbreviation>, <Date of
Part b Part c Part d Part e RA-5 (1) The organization employs vulnerability scanning tools that include the capability to readily update the list of information system vulnerabilities to be scanned. RA-5 (1) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Abbreviation>, <Date of
FedRAMP-System-Security-Plan-Template-v2.1.docx