appropriate to define at the Enterprise level. SA-14 SA-14 CCI-003229 High High High The organization conducting The system is not the inspection/assessment considered a obtains and examines the HIGH level. documented information Therefore, this system components to AP is not ensure the organization applicable. inspected/assessed identifies critical information system components by performing a criticality analysis for information systems, information system components, or information system services IAW DoDI 5200.44. SA-14 SA-14 CCI-003230 High High High The organization conducting The system is not the inspection/assessment considered a obtains and examines the HIGH level. documented information Therefore, this system functions to ensure AP is not the organization being applicable. inspected/assessed identifies critical information system functions by performing a criticality analysis for information systems, information system components, or information system services IAW DoDI 5200.44. The system is not SA-14 SA-14 CCI-003231 High High High The organization conducting the inspection/assessment considered a obtains and examines the HIGH level. documented information Therefore, this systems, information system AP is not components, or information applicable. system services to ensure they have been defined IAW DoDI 5200.44. DoD has determined the information systems, information system components, or information system services are not appropriate to define at the Enterprise level. SA-14 SA-14 CCI-003232 High High High The organization conducting The system is not the inspection/assessment considered a obtains and examines the HIGH level. documented decision points Therefore, this to ensure they have been AP is not defined IAW DoDI 5200.44 applicable. and DoDI 5000.2. DoD has determined the decision points are not appropriate to define at the Enterprise level.
appropriate to define at the Enterprise level. SA-14 SA-14 CCI-003229 High High High The organization conducting the inspection/assessment obtains and examines the documented information system components to ensure the organization inspected/assessed identifies critical information system components by performing a criticality analysis for information systems, information system components, or information system services IAW DoDI 5200.44. The system is not considered a HIGH level. Therefore, this AP is not applicable. SA-14 SA-14 CCI-003230 High High High The organization conducting the inspection/assessment obtains and examines the documented information system functions to ensure the organization being inspected/assessed identifies critical information system functions by performing a criticality analysis for information systems, information system components, or information system services IAW DoDI 5200.44. The system is not considered a HIGH level. Therefore, this AP is not applicable. SA-14 SA-14 CCI-003231 High High High The organization conducting the inspection/assessment obtains and examines the documented information systems, information system components, or information system services to ensure they have been defined IAW DoDI 5200.44. DoD has determined the information systems, information system components, or information system services are not appropriate to define at the Enterprise level. The system is not considered a HIGH level. Therefore, this AP is not applicable. SA-14 SA-14 CCI-003232 High High High The organization conducting the inspection/assessment obtains and examines the documented decision points to ensure they have been defined IAW DoDI 5200.44 and DoDI 5000.2. DoD has determined the decision points are not appropriate to define at the Enterprise level. The system is not considered a HIGH level. Therefore, this AP is not applicable.
RMF_System-and-Services-Acquisition-Plan.docx