Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue SA-05: SA-05 System documentation

The organisation obtains or develops administrator documentation covering secure configuration, installation and operation, effective use and maintenance of security and privacy functions, and known vulnerabilities in privileged functions, and user documentation covering user-accessible security and privacy functions, secure ways of interacting, and user responsibilities; documents attempts to obtain unavailable documentation and takes defined actions; and distributes documentation to defined roles. 5 enhancements.