PL-2 PL-2 (b) High High High The organization conducting Moderate Moderate Moderate the inspection/assessment eMASS SSP Low Low Low obtains and examines the security plan via the organization's information sharing portal to ensure the organization being inspected/assessed distributes copies of the security plan to at a minimum, the ISSO, ISSM and SCA via the organization's information sharing portal. DoD has defined the personnel or roles as at a minimum, the ISSO, ISSM and SCA. PL-2 PL-2 (b) High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with Low Low Low automatically compliant with this CCI this CCI because they are because they covered at the DoD level. are covered at the DoD level DoD has defined the personnel or roles as at a minimum, the ISSO, ISSM and SCA. PL-2 PL-2 (b) High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with Low Low Low automatically compliant with this CCI this CCI because they are because they covered at the DoD level. are covered at the DoD DoD has defined the personnel or roles as at a minimum, the ISSO, ISSM and SCA. PL-2 PL-2 (c ) High High High The organization conducting Moderate Moderate Moderate the inspection/assessment eMASS SSP Low Low Low obtains and examines the audit records of security plan reviews to verify the security plan has been reviewed annually. DoD has defined the frequency as annually. PL-2 PL-2 (c ) High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with Low Low Low automatically compliant with this CCI this CCI because they are because they covered at the DoD level. are covered at the DoD DoD has defined the frequency as annually.
PL-2 PL-2 (b) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the security plan via the organization's information sharing portal to ensure the organization being inspected/assessed distributes copies of the security plan to at a minimum, the ISSO, ISSM and SCA via the organization's information sharing portal. DoD has defined the personnel or roles as at a minimum, the ISSO, ISSM and SCA. eMASS SSP PL-2 PL-2 (b) High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as at a minimum, the ISSO, ISSM and SCA. Automatically compliant with this CCI because they are covered at the DoD level PL-2 PL-2 (b) High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as at a minimum, the ISSO, ISSM and SCA. Automatically compliant with this CCI because they are covered at the DoD PL-2 PL-2 (c ) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the audit records of security plan reviews to verify the security plan has been reviewed annually. DoD has defined the frequency as annually. eMASS SSP PL-2 PL-2 (c ) High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as annually. Automatically compliant with this CCI because they are covered at the DoD
RMF_Security-Planning.docx