CCI-000576

The organization develops a security Concept of Operations (CONOPS) for the information system containing, at a minimum: the purpose of the system; a description of the system architecture; the security authorization schedule; and the security categorization and associated factors considered in determining the categorization.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000576.