DS-13.15

Mission Critical?
Required
Security Control

Address all Risk Treatment Plans within 6 months

High Data
Required
Moderate Data
Required
Restricted Data
Required
Low Data
Required

DS-13.14

Mission Critical?
Required
Security Control

Conduct risk assessments with new implementations

High Data
Required
Moderate Data
Required
Restricted Data
Required
Low Data
Recommended