PL-4_rules-of-behavior
Establish and provide to individuals requiring access to the system, the rules that describe their responsibilities and expected behavior for infor...
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Establish and provide to individuals requiring access to the system, the rules that describe their responsibilities and expected behavior for infor...
Design the security and privacy architectures for the system using a defense-in-depth approach that: Allocates [organization-defined] to [organization
Require that [organization-defined] allocated to [organization-defined] are obtained from different suppliers.
Develop security and privacy architectures for the system that: Describe the requirements and approach to be taken for protecting the confidentiality,
Centrally manage [organization-defined].
The hardware, software (e.g., firmware, operating systems, applications), and services of physical and virtual platforms are managed consistent with t
Develop and disseminate an organization-wide information security program plan that: Provides an overview of the requirements for the security program
Manage the security and privacy state of organizational systems and the environments in which those systems operate through authorization processes;
Implement an insider threat program that includes a cross-discipline insider threat incident handling team.
Establish a security and privacy workforce development and improvement program.