Closed mogul closed 7 years ago
This needs a lot of subject matter expertise about planning at a high level for cloud.gov - we suspect some of this is handled by GSA/18F or even 18F Products & Platforms.
I'll take it from here.
Closing as "what we did on SA during PI7"; afawk SA is done.
In order for compliance reviewers to understand our system, we need to update this family of control statements to explain our system (and policies and procedures) in more precise and thorough detail.
Setup
Read the guidance in HOWTO update the SSP before working on this.
Acceptance criteria
SA-1:
SA-2:
SA-3:
SA-9:
SA-9 (1):
SA-9 (2):
SA-9 (4):
SA-9 (5):
SA-10:
SA-11:
SA-11 (1):
SA-11 (2):
SA-11 (8):
SA overall:
Implementation guidance
During grooming, take items from the following and list them as specific tasks above.