Security Configuration Checklist to CITR-017: Program for control details. Automated Unauthorized Component Detection Security Configuration Checklist Refer to CITR-017: CM-8.3 Program X X for control details. E(3) The DOC requires OUs to take action as appropriate to address detection of unauthorized components. Software Usage Restrictions Software Usage Restrictions CM-10 X X X Peer-to-Peer Technology Refer to CITR-011, and Access and Use for control details. User-Installed Software User-Installed Software CM-11 X X X Access and Use, to CITR-022: for control details. Contingency Planning (CP) Security Baselines Control Control Name/Requirement Number Low High Contingency Plan Contingency Plan The DOC requires the OUs to develop and implement a Contingency Plan for the information system addressing contingency responsibilities, assigned individuals with contact information, and activities associated with CP-2 X X X restoring the system after a disruption or failure. Designated officials within the organization review and approve the Contingency Plan and distribute copies of the plan to key contingency personnel at least annually and update as needed. Resume Essential Missions/Business Functions Development of Homeland Security See OMB M-04-15: Presidential Directive (HSPD) - 7 Critical Infrastructure CP-2.3 X X Protection to Protect Federal Critical Infrastructures and Key Resources for related requirements. Identify Critical Assets Development of Homeland Security See OMB M-04-15: CP-2.8 X X Presidential Directive (HSPD) - 7 Critical Infrastructure Protection Plans to Protect Federal Critical
to CITR-017: Security Configuration Checklist Program for control details. CM-8.3 E(3) Automated Unauthorized Component Detection Refer to CITR-017: Security Configuration Checklist Program for control details. The DOC requires OUs to take action as appropriate to address detection of unauthorized components. X X Software Usage Restrictions CM-10 Software Usage Restrictions Refer to CITR-011, Peer-to-Peer Technology and Access and Use for control details. X X X User-Installed Software CM-11 User-Installed Software to CITR-022: Access and Use, for control details. X X X Contingency Planning (CP) Control Number Control Name/Requirement Security Baselines Low High Contingency Plan CP-2 Contingency Plan The DOC requires the OUs to develop and implement a Contingency Plan for the information system addressing contingency responsibilities, assigned individuals with contact information, and activities associated with restoring the system after a disruption or failure. Designated officials within the organization review and approve the Contingency Plan and distribute copies of the plan to key contingency personnel at least annually and update as needed. X X X CP-2.3 Resume Essential Missions/Business Functions See OMB M-04-15: Development of Homeland Security Presidential Directive (HSPD) - 7 Critical Infrastructure Protection to Protect Federal Critical Infrastructures and Key Resources for related requirements. X X CP-2.8 Identify Critical Assets See OMB M-04-15: Development of Homeland Security Presidential Directive (HSPD) - 7 Critical Infrastructure Protection Plans to Protect Federal Critical X X
2014-doc-itspp.docx