Canada ITSG-33 - IT Security Risk Management
Annex 2: ISSIP development, integration, testing and installation phases – Canada ITSG-33 - IT Security Risk Management

Canada ITSG-33 - IT Security Risk Management A2-3.9.4: 3.9.4 Prepare security provisions for the operations plan

What does A2-3.9.4 require?

The project prepares the operations plan's security provisions: the schedule of actions and procedures the operations group will perform to maintain the security posture and manage risk, made up of the operational security procedures and the list of outstanding deficiencies with mitigation plans and schedules.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Annex 2: ISSIP development, integration, testing and installation phases – Canada ITSG-33 - IT Security Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.