CM-3.4: Security and Privacy Representatives

An OSCAL Control

- organization-defined security and privacy representatives
- security representatives
  security representatives required to be members of the change control element are defined;
- privacy representatives
  privacy representatives required to be members of the change control element are defined;
- configuration change control element
  the configuration change control element of which the security and privacy representatives are to be members is defined;