Canada ITSG-33 - IT Security Risk Management
Annex 2: ISSIP stakeholder engagement, concept and planning phases – Canada ITSG-33 - IT Security Risk Management

Canada ITSG-33 - IT Security Risk Management A2-3.2.4: 3.2.4 Approve initial security assurance requirements

Before planning, the project reviews the concept-phase outputs with the authorizer and obtains approval of the initial assurance requirements, which set the effort, cost and timeline of security engineering and assessment. The authorizer reviews the profile's security approaches with security officials and the architect, the system category with the practitioner, and the assurance requirements' impact with the project manager, as part of concept-phase gating.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Annex 2: ISSIP stakeholder engagement, concept and planning phases – Canada ITSG-33 - IT Security Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Canada ITSG-33 - IT Security Risk Management controls