Canada ITSG-33 - IT Security Risk Management
Annex 2: ISSIP development, integration, testing and installation phases – Canada ITSG-33 - IT Security Risk Management

Canada ITSG-33 - IT Security Risk Management A2-3.9.5: 3.9.5 Assemble the authorization package

What does A2-3.9.5 require?

The project assembles the authorization package agreed with the authorizer at the start, including at minimum the statements of assessment, the residual risk assessment results or TRA report, and the operations plan with its security provisions.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Annex 2: ISSIP development, integration, testing and installation phases – Canada ITSG-33 - IT Security Risk Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Canada ITSG-33 - IT Security Risk Management controls