3.1.3 Registration NIST SP The registration identifies the information system (and Reference Task TBD by subsystems, if appropriate) in the system inventory and NIST site Order Task establishes a relationship between the information for best COR Order system and the parent or governing organization that practices owns, manages, and/or controls the system. 3.2.1 Updated Security NIST SP The updated security control selection documentation Task TBD by Control Selection includes, as appropriate: (i) updated tailored baseline Order Task Documentation security controls by applying scoping, parameterization, Reference COR and compensating control guidance; (ii) updated NIST site supplemented, tailored baseline security controls, if for best necessary, with additional controls or control practices. enhancements to address unique organizational needs based on a risk assessment and local conditions; and (iii) updated minimum assurance requirements. 3.2.1 System Security The system security plan is a formal document that Task TBD by Plan provides an overview of the security requirements for Order Task the information system and describes the security Reference COR Order controls in place or planned for meeting those NIST site requirements. This deliverable takes the System for best Definition Document and the original and updated practices. Security Control Selection Documentation and builds the SSP with that information.
3.1.3 Registration NIST SP The registration identifies the information system (and subsystems, if appropriate) in the system inventory and establishes a relationship between the information system and the parent or governing organization that owns, manages, and/or controls the system. Reference NIST site for best practices Task Order COR TBD by Task Order 3.2.1 Updated Security Control Selection Documentation NIST SP The updated security control selection documentation includes, as appropriate: (i) updated tailored baseline security controls by applying scoping, parameterization, and compensating control guidance; (ii) updated supplemented, tailored baseline security controls, if necessary, with additional controls or control enhancements to address unique organizational needs based on a risk assessment and local conditions; and (iii) updated minimum assurance requirements. Reference NIST site for best practices. Task Order COR TBD by Task 3.2.1 System Security Plan The system security plan is a formal document that provides an overview of the security requirements for the information system and describes the security controls in place or planned for meeting those requirements. This deliverable takes the System Definition Document and the original and updated Security Control Selection Documentation and builds the SSP with that information. Reference NIST site for best practices. Task Order COR TBD by Task Order
Appendix_C_-_Table_of_Deliverables_and_References.docx