VERSION HISTORY/CHANGE RECORD Change Person Posting Change Reason for Change Page Number of Number Change Change Revision 1 November 6, 2009 – 1 Bo Berlas Minor Changes to GSA 800-53 GSA 800-53 Control 17 R3 Control Tailoring workbook Tailoring Workbook in Appendix A Update Revision 2 November 7, 2014 – 1 John Sitcharing/ Minor changes to verbiage Update Penetration 9 Blanche Heard regarding Penetration Testing Testing verbiage 2 John Sitcharing/ CISO mandated change in CISO Mandate Entire document Blanche Heard Penetration Testing requirement/ naming conventions based on consolidation efforts Revision 3 February 2, 2017 – 1 Bo Berlas Essential Security controls Security Controls Update 9 to Section 2 2 Bo Berlas Added sections 3-5 Updated to Provide 22-55 Requirements for Internal Systems, Systems, and Mobile Applications Revision 4 January 25, 2018 – 1 Bryon Feliksa/ Incorporated security Incorporate MV 16-01 Throughout John Klemens references from MV 16-01 and and consolidate GSA additional references. Added a Cybersecurity and Privacy section on LiSaaS, Privacy Guidance. controls, and updated Privacy and other sections to align with GSA policy and procedures.
VERSION HISTORY/CHANGE RECORD Change Number Person Posting Change Change Reason for Change Page Number of Change Revision 1 – November 6, 2009 1 Bo Berlas Minor Changes to GSA 800-53 R3 Control Tailoring workbook in Appendix A GSA 800-53 Control Tailoring Workbook Update 17 Revision 2 – November 7, 2014 1 John Sitcharing/ Blanche Heard Minor changes to verbiage regarding Penetration Testing Update Penetration Testing verbiage 9 2 John Sitcharing/ Blanche Heard CISO mandated change in Penetration Testing requirement/ naming conventions based on consolidation efforts CISO Mandate Entire document Revision 3 – February 2, 2017 1 Bo Berlas Essential Security controls to Section 2 Security Controls Update 9 2 Bo Berlas Added sections 3-5 Updated to Provide Requirements for Internal Systems, Systems, and Mobile Applications 22-55 Revision 4 – January 25, 2018 1 Bryon Feliksa/ John Klemens Incorporated security references from MV 16-01 and additional references. Added a section on LiSaaS, Privacy controls, and updated Privacy and other sections to align with GSA policy and procedures. Incorporate MV 16-01 and consolidate GSA Cybersecurity and Privacy Guidance. Throughout
Security_and_Privacy_Requirements_for_IT_Acquisition_Efforts_%5BCIO_IT_Security_09-48_Rev_4%5D_01-25-2018.docx