Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Incident Response Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Test the organizational incident response capability Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Maintenance Perform maintenance on organizational systems. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Ensure equipment removed for off-site maintenance is sanitized of any CUI. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale.
Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Incident Response Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Test the organizational incident response capability Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Maintenance Perform maintenance on organizational systems. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Provide controls on the tools, techniques, mechanisms, and personnel used to conduct system maintenance. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Ensure equipment removed for off-site maintenance is sanitized of any CUI. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale.
CUI-SSP-Template-final.docx