History
- Priority
- should
- 2010
- Agencies should ensure information security monitoring activities are conducted on accredited systems.
- 2008
- The accreditation authority should conduct periodic reviews of the security of systems awarded ICT security accreditation.