
140 ■ Case 5 SRA International, Inc.
T
ABLE 5-6 Assessment Questions
(continued)
4.1.8 Has management authorized interconnections to all
systems (including systems owned and operated by
another program, agency, organization, or contractor)?
4.2. Is the system operating on an interim authority to process in
accordance with specified agency procedures?
4.2.1 Has management initiated prompt action to correct
deficiencies?
5. System Security Plan
5.1. Is a system security plan documented for the system and all
interconnected systems if the boundary controls are ineffective?
5.1.1 Is the system security plan approved by key affected
parties and management?
5.1.2 ...