Number | Title | Impact | Priority | Subject Area |
---|---|---|---|---|
SA-2 | Allocation Of Resources | LOW | P1 | System And Services Acquisition |
Instructions |
---|
The organization: SA-2a. Determines information security requirements for the information system or information system service in mission/business process planning; SA-2b. Determines, documents, and allocates the resources required to protect the information system or information system service as part of its capital planning and investment control process; and SA-2c. Establishes a discrete line item for information security in organizational programming and budgeting documentation. |
Guidance |
---|
Resource allocation for information security includes funding for the initial information system or information system service acquisition and funding for the sustainment of the system/service. |
Enhancements |
---|