System and information integrity policy
system and information integrity procedures
procedures addressing security alerts, advisories, and directives
system design documentation
system configuration settings and associated documentation
automated mechanisms supporting the distribution of security alert and advisory information
records of security alerts and advisories
system audit records
system security plan
other relevant documents or records