From Voice Video Policy Security Technical Implementation Guide
Part of SRG-POL-300598
Associated with: CCI-000573
SSPs relate security requirements to a set of security controls and control enhancements. SSPs also describe, at a high level, how the security controls and control enhancements meet those security requirements, but do not provide detailed, technical descriptions of the specific design or implementation of the controls/enhancements. SSPs contain sufficient information (including the specification of parameter values for assignment and selection statements either explicitly or by reference) to enable a design and implementation that is unambiguously compliant with the intent of the plans and subsequent determinations of risk to organizational operations and assets, individuals, other organizations, and the Nation if the plan is implemented as intended.
Review each Voice Video SSP. Verify the organizations SSP for each Voice Video system has been reviewed annually or when system modifications occur, including when resulting from changes to implementation guidance. Ensure a revision history containing dates, documents, and changes, is maintained for each Voice Video SSP. If the organizations SSP for each Voice Video system has not been reviewed annually or when system modifications occur, this is a finding. If the review does not include the changes to implementation guidance, this is a finding. If a revision history is not maintained for each Voice Video SSP, this is a finding.
Create a revision history containing dates, documents, and changes for each Voice Video SSP if one does not exist. Document reviews in each Voice Video SSP annually or when system modifications occur. Include changes to implementation guidance in the documentation.
Lavender hyperlinks in small type off to the right (of CSS
class id
, if you view the page source) point to
globally unique URIs for each document and item. Copy the
link location and paste anywhere you need to talk
unambiguously about these things.
You can obtain data about documents and items in other
formats. Simply provide an HTTP header Accept:
text/turtle
or
Accept: application/rdf+xml
.
Powered by sagemincer