NIH | National Cancer Institute | NCI Wiki  

Versions Compared

Old Version 2

changes.mady.by.user Hayn, Craig (NIH/NCI) [E]

Saved on

compared with

New Version 3

changes.mady.by.user Hayn, Craig (NIH/NCI) [E]

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Contractor Hosted (Third Party)Cloud HostedCBIIT Fully ManagedNCI Customer Managed and Co-Location
FIPS-199 Security Categorization√√√√
e-Authentication Risk Assessment√√√√
Privacy Impact Analysis√√√√
System Security Plan√√√√
IS Contingency Plan√√√√
Business Impact Analysis √ (may
also be included with the system contingency plan)
embed with ISCP)√√√

IS Contingency Plan Exercise Report

  • Tabletop (Low (L) availability only)
  • Simulated (L/M/H)
  • Functional (L/M/H)
√√√√
Memorandum of Understanding (MoU) and/or Interconnection Security Agreement (ISA)As needed


Security (Control) Assessment Plan (SAP/SCAP)√√√√
Security Assessment Report (SAR)√√√√
Configuration Management Plan (CMP)√√√√
Plan of Action and Milestones (POA&M)√√√√
Signed ATO Letter √√√√