3 5 6 DISA 6 7 General Readiness (GR) CSP Questions 7 Computer Network Defense questions 10 2 17 19 Access Control (AC) Additional controls 19 – Access Control (AC) different parameters 21 – Awareness and Training (AT) different parameters 28 – and Accountability (AU) different parameters 28 – Assessment and Authorization (CA) Additional controls 33 – Assessment and Authorization (CA) different parameters 33 – Configuration Management (CM) - Additional controls 36 Configuration Management (CM) different parameters 39 – Contingency Planning (CP) different parameters 44 – Identification and Authentication (IA) additional controls 45 – Identification and Authentication (IA) different parameters 47 – Incident Response (IR) - additional controls 51 Incident Response (IR) - different parameters 52 Maintenance (MA) additional controls 54 – Media Protection (MP) additional controls 55 – Media Protection (MP) different parameters 58 – Physical and Environmental Protection (PE) additional controls 59 – Physical and Environmental Protection (PE) different parameters 61 – Personnel Security (PS) different parameters 64 – Risk Assessment (RA) additional controls 66 – System and Services Acquisition (SA) - additional controls 67 System and Communications Protection (SC) additional controls 68 – System and Communications Protection (SC) different parameters 73 – System and Information Integrity (SI) additional controls 77 – System and Information Integrity (SI) different parameters 82 – A: DISA ECSB 88 Cloud Service Provider Signatures
3 5 6 DISA 6 7 General Readiness (GR) CSP Questions 7 Computer Network Defense questions 10 2 17 19 Access Control (AC) – Additional controls 19 Access Control (AC) – different parameters 21 Awareness and Training (AT) – different parameters 28 and Accountability (AU) – different parameters 28 Assessment and Authorization (CA) – Additional controls 33 Assessment and Authorization (CA) – different parameters 33 Configuration Management (CM) - Additional controls 36 Configuration Management (CM) – different parameters 39 Contingency Planning (CP) – different parameters 44 Identification and Authentication (IA) – additional controls 45 Identification and Authentication (IA) – different parameters 47 Incident Response (IR) - additional controls 51 Incident Response (IR) - different parameters 52 Maintenance (MA) – additional controls 54 Media Protection (MP) – additional controls 55 Media Protection (MP) – different parameters 58 Physical and Environmental Protection (PE) – additional controls 59 Physical and Environmental Protection (PE) – different parameters 61 Personnel Security (PS) – different parameters 64 Risk Assessment (RA) – additional controls 66 System and Services Acquisition (SA) - additional controls 67 System and Communications Protection (SC) – additional controls 68 System and Communications Protection (SC) – different parameters 73 System and Information Integrity (SI) – additional controls 77 System and Information Integrity (SI) – different parameters 82 A: DISA ECSB 88 Cloud Service Provider Signatures
U_CSM_level_2_saas_template.docx