CA-1_policy-and-procedures
Develop, document, and disseminate to [organization-defined]: [organization-defined] assessment, authorization, and monitoring policy that: Procedures
☆1.21k repo stars⑂201 repo forks
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
CA-2(1)_independent-assessors
Employ independent assessors or assessment teams to conduct control assessments.
☆1.21k repo stars⑂201 repo forks
DevOps & Security
CA-2(2)_specialized-assessments
Include as part of control assessments, [organization-defined], [organization-defined], [organization-defined].
☆1.21k repo stars⑂201 repo forks
DevOps & Security
CA-2_control-assessments
Select the appropriate assessor or assessment team for the type of assessment to be conducted;
☆1.21k repo stars⑂201 repo forks
DevOps & Security
CA-3(1)_unclassified-national-security-system-connections
Unclassified National Security System Connections
☆1.21k repo stars⑂201 repo forks
DevOps & Security
CA-3(3)_unclassified-non-national-security-system-connections
Unclassified Non-national Security System Connections
☆1.21k repo stars⑂201 repo forks
DevOps & Security
CA-3(4)_connections-to-public-networks
Connections to Public Networks
☆1.21k repo stars⑂201 repo forks
DevOps & Security
CA-3(6)_transfer-authorizations
Verify that individuals or systems transferring data between interconnecting systems have the requisite authorizations (i.e., write permissions or pri
☆1.21k repo stars⑂201 repo forks
DevOps & Security
CA-3(7)_transitive-information-exchanges
Identify transitive (downstream) information exchanges with other systems through the systems identified in [CA-3a](#ca-3_smt.a) ;
☆1.21k repo stars⑂201 repo forks
DevOps & Security
CA-3_information-exchange
Approve and manage the exchange of information between the system and other systems using [organization-defined];
☆1.21k repo stars⑂201 repo forks
DevOps & Security