For this week's discussion, you are asked to create a 3-5
paragraph "talking points" paper in which you discuss the (CA) family
of security controls. You should identify and discuss at least three specific
controls from this family. Focus on how these controls provide for the implementation
of assessment, authorization, and monitoring functions to protect the
organization's information and information systems. CA-5, for example, calls
for developing a specific plan of action and milestones to track security controls
implementation. CA-2 requires that all security controls be assessed to
determine if they are working as intended.
Your talking points will be incorporated into a budget
presentation and, for that reason, should support (explain) the Office of Risk
Management's planned activities in this area for the next fiscal year. Full
paragraphs are preferred for a talking points paper, but you may use a limited
number of bullet points. Remember to use and cite authoritative sources in your
work. Place your list of references at the end of your paper.
Remember to submit your discussion response to the Turn It
In for Discussions assignment folder. See the forum instructions for more
information.