identified individually. CA-4 Security Certification SYSTEM CONTROL Withdrawn: Incorporated into CA-2 REQUIREMENT Implementation Status: Implemented Planned Common Enter text in order to provide detailed information regarding the implementation strategy. If control is specific to one component of an application, then controls for the other components of the application must be identified individually. CA-5 Plan of Action and Milestones CONTROL Withdrawn: Not applicable to COV REQUIREMENT CA-6 Security Authorization SYSTEM The Organization: a. Assigns a senior-level executive or manager as the authorizing official for the information system; CONTROL REQUIREMENT b. Ensures that the authorizing official authorizes the information system for processing before commencing operations; and
identified individually. CA-4 Security Certification SYSTEM CONTROL REQUIREMENT Withdrawn: Incorporated into CA-2 Implementation Status: Implemented Planned Common Enter text in order to provide detailed information regarding the implementation strategy. If control is specific to one component of an application, then controls for the other components of the application must be identified individually. CA-5 Plan of Action and Milestones CONTROL REQUIREMENT Withdrawn: Not applicable to COV CA-6 Security Authorization SYSTEM CONTROL REQUIREMENT The Organization: a. Assigns a senior-level executive or manager as the authorizing official for the information system; b. Ensures that the authorizing official authorizes the information system for processing before commencing operations; and
SSP_FINAL.docx