CA.L2-3.12.1
CA.L2-3.12.1: Security Control Assessment
Periodically assess security controls for effectiveness.
CA.L2-3.12.2
CA.L2-3.12.2: Plan of Action
Develop and implement plans of action to correct deficiencies.
CA.L2-3.12.3
CA.L2-3.12.3: Security Control Monitoring
Monitor security controls on an ongoing basis.
CA.L2-3.12.4
Writing Your SSP: System Security Plan Guide (CA.L2-3.12.4)
Develop, document, and periodically update system security plans that describe system boundaries, system environments of operation, how security requirements are implemented, and the relationships with or connections to other systems.