CA-3 (3) CA-3 (3) blank blank blank The organization NIST has not conducting the allocated this inspection/assessment AP. obtains and examines Therefore, network topology this AP is not diagrams and examines applicable. the information system to ensure the organization being inspected/assessed does not connect any national security systems to an external network without the use of protection devices defined in CA-3 (3), CCI 2077.
CA-3 (3) CA-3 (3) blank blank blank The organization conducting the inspection/assessment obtains and examines network topology diagrams and examines the information system to ensure the organization being inspected/assessed does not connect any national security systems to an external network without the use of protection devices defined in CA-3 (3), CCI 2077. NIST has not allocated this AP. Therefore, this AP is not applicable.
RMF_Security-Assessment-and-Authorization-Plan.docx