History

Priority

must

2010

Before undertaking the second stage of the audit the system owner must implement the controlsfor the system.

2008

During the implementation and certification phase the system manager must implement the SSP for the system being certified, which the certification authority subsequently certifies according to its conformance to the SSP.