💼 RA-1 Policy and Procedures (L)(M)(H)

• Contextual name: 💼 RA-1 Policy and Procedures (L)(M)(H)
• ID: /frameworks/fedramp-low-security-controls/ra/01
• Located in: 💼 Risk Assessment

Description

a. Develop, document, and disseminate to [Assignment: organization-defined personnel or roles]:

1. [Selection (one-or-more): organization-level; mission/business process-level; system-level] risk assessment policy that:

   (a) Addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and

   (b) Is consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines; and

2. Procedures to facilitate the implementation of the risk assessment policy and the associated risk assessment controls;

b. Designate an [Assignment: organization-defined official] to manage the development, documentation, and dissemination of the risk assessment policy and procedures; and

c. Review and update the current risk assessment:

1. Policy [FedRAMP Assignment: at least every three (3) years] and following [Assignment: organization-defined events]; and

2. Procedures [FedRAMP Assignment: at least annually] and following [FedRAMP Assignment: significant changes].

Similar

• Sections
  • /frameworks/nist-sp-800-53-r5/ra/01
  • /frameworks/fedramp-high-security-controls/ra/01
• Internal
  • ID: dec-c-cff76cf4

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 FedRAMP High Security Controls → 💼 RA-1 Policy and Procedures (L)(M)(H)
💼 NIST SP 800-53 Revision 5 → 💼 RA-1 Policy and Procedures

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags