incident response procedures; training; and testing/exercises; and (iv) the organization implements the resulting changes to incident response procedures, training and testing/exercise accordingly. Failure to meet the resource allocation requirement listed below could result in the organization lacking the required security control being acquired and implemented, which could cause the loss of critical mission/business assets or the disruption of [Test: SA-2.1 - Allocation of organization operations, [Test: SA-2.1 - Allocation of [E-# OR Resources [NIST functions and services: Allocation of High Resources] W-#] 800-53 w/ DHS Resources] 4300A SA-2] (i) the organization includes a Not Entered determination of the Not Entered information security requirements for the information system in mission/business process planning; (ii) the organization determines, documents, and allocates the resources required
incident response procedures; training; and testing/exercises; and (iv) the organization implements the resulting changes to incident response procedures, training and testing/exercise accordingly. [E-# OR W-#] Allocation of Resources [NIST 800-53 w/ DHS 4300A SA-2] [Test: SA-2.1 - Allocation of Resources] Not Entered Failure to meet the resource allocation requirement listed below could result in the organization lacking the required security control being acquired and implemented, which could cause the loss of critical mission/business assets or the disruption of organization operations, functions and services: (i) the organization includes a determination of the information security requirements for the information system in mission/business process planning; (ii) the organization determines, documents, and allocates the resources required High [Test: SA-2.1 - Allocation of Resources] Not Entered
Security%20Assessment%20Report%20Extensible.docx