Skip to content
ATO Pathways
  Log In

PM-3: Information Security and Privacy Resources

An OSCAL Control

Statement

    • a.

      Include the resources needed to implement the information security and privacy programs in capital planning and investment requests and document all exceptions to this requirement;

    • b.

      Prepare documentation required for addressing information security and privacy programs in capital planning and investment requests in accordance with applicable laws, executive orders, directives, policies, regulations, standards; and

    • c.

      Make available for expenditure, the planned information security and privacy resources.