Security

For cloud-native environments:

• Incident response plan
• Security risk management plan
• System security plan
• System security plan (annex)
• Standard operating procedures

For hybrid environments:

• Incident response plan
• Security risk management plan
• System security plan
• System security plan (annex)
• Standard operating procedures

For both:

• Cloud assessment and authorisation alignment
• Continuous monitoring plan