Fedramp system Security Plan (ssp) High Baseline Template


SA-9 (1) Control Enhancement (M) (H)



Download 1.2 Mb.
Page370/478
Date16.12.2020
Size1.2 Mb.
#54609
1   ...   366   367   368   369   370   371   372   373   ...   478
FedRAMP-SSP-High-Baseline-Template
FedRAMP-SSP-High-Baseline-Template, North Carolina Summary Table of Ecoregion Characteristics

SA-9 (1) Control Enhancement (M) (H)


The organization:

  1. Conducts an organizational assessment of risk prior to the acquisition or outsourcing of dedicated information security services; and

  2. Ensures that the acquisition or outsourcing of dedicated information security services is approved by [Assignment: organization-defined personnel or roles].



SA-9 (1)

Control Summary Information

Responsible Role:

Parameter SA-9(1)(b):

Implementation Status (check all that apply):

Implemented

Partially implemented

☐ Planned

Alternative implementation

Not applicable



Control Origination (check all that apply):

Service Provider Corporate

☐ Service Provider System Specific

☐ Service Provider Hybrid (Corporate and System Specific)

☐ Configured by Customer (Customer System Specific)

☐ Provided by Customer (Customer System Specific)

☐ Shared (Service Provider and Customer Responsibility)

☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,





SA-9 (1) What is the solution and how is it implemented?

Part a




Part b






Download 1.2 Mb.

Share with your friends:
1   ...   366   367   368   369   370   371   372   373   ...   478




The database is protected by copyright ©ininet.org 2024
send message

    Main page