History
- Priority
- should
- Nov 2018
- Removed
- Removed to ensure a focus on system-specific security documentation.
- 2017
- The SRMP should contain a security risk assessment and a corresponding risk treatmentstrategy.
- 2015
- The SRMP should contain a security risk assessment and a corresponding risk treatmentstrategy.
- 2010
- The SRMP should contain a security risk assessment and a corresponding risk treatment strategy.