Audit and accountability policy
system security plan
privacy plan
access control policy and procedures
procedures addressing protection of audit information
system design documentation
system hardware settings
system configuration settings and associated documentation
system audit records
other relevant documents or records