Suggestions

• What is the Risk Management Framework (RMF) used for?

• What is the purpose of the Data Breach Policy & Procedures?

• What is the security classification of the Information Security Policy?

• What is the purpose of the Information Security Policy?

• Who is responsible for downloading and installing the latest application and software updates?

• What does the ISO provide to all operating units?

• What does the ISO assign?

• How should personal or confidential information be handled?