The organization: PL-1a.
Develops, documents, and disseminates to Assignment: organization-defined personnel or roles: PL-1a.1.
A security planning policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and PL-1a.2.
Procedures to facilitate the implementation of the security planning policy and associated security planning controls; and PL-1b.
Reviews and updates the current: PL-1b.1.
Security planning policy Assignment: organization-defined frequency; and PL-1b.2.
Security planning procedures Assignment: organization-defined frequency.