Board Report: 2014-IT-B-021 December 18, 2014
Rec. no. | Report page no. | Recommendation | Responsible office |
---|---|---|---|
1 | 5 | Evaluate the automated workflow tool and determine any improvements needed to ensure it can meet documentation requirements of the Board’s information security life cycle processes. | Division of Information Technology |
2 | 5 | Ensure that system owners develop and input the security documentation for all Board-owned and -operated systems into the automated workflow tool. | Division of Information Technology |
3 | 7 | Perform a thorough reconciliation between the existing policy documents and the new Risk Management Program and Risk Assessment Standard to determine which processes remain relevant and update the applicable policy documents. | Division of Information Technology |