Fedramp system Security Plan (ssp) High Baseline Template


System and Services Acquisition (SA)



Download 1.2 Mb.
Page356/478
Date16.12.2020
Size1.2 Mb.
#54609
1   ...   352   353   354   355   356   357   358   359   ...   478
FedRAMP-SSP-High-Baseline-Template
FedRAMP-SSP-High-Baseline-Template, North Carolina Summary Table of Ecoregion Characteristics

System and Services Acquisition (SA)

SA-1 System and Services Acquisition Policy and Procedures (H)


The organization:

  1. Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:

    1. A system and services acquisition policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and

    2. Procedures to facilitate the implementation of the system and services acquisition policy and associated system and services acquisition controls; and

  1. Reviews and updates the current:

    1. System and services acquisition policy [FedRAMP Assignment: at least annually]; and

    2. System and services acquisition procedures [FedRAMP Assignment: at least annually or whenever a significant change occurs].



SA-1


Download 1.2 Mb.

Share with your friends:
1   ...   352   353   354   355   356   357   358   359   ...   478




The database is protected by copyright ©ininet.org 2024
send message

    Main page