diff --git a/src/examples/ssp/xml/actions/example-approval-ssp.xml b/src/examples/ssp/xml/actions/example-approval-ssp.xml index f802089d..14e828ae 100644 --- a/src/examples/ssp/xml/actions/example-approval-ssp.xml +++ b/src/examples/ssp/xml/actions/example-approval-ssp.xml @@ -119,10 +119,10 @@ maintain deploy system in environment - + The Example System Core Component -

+

Example System, like other BigCorp information systems, uses security controls from a variety of frameworks, but is especially focused on NIST SP 800-53 controls.

 @@ -134,7 +134,21 @@

- + + + + +

The ISSM ensures staff developing and operating this system handle security awareness and training pretty well. The ISSM commits staff to operational guidelines and procedures based on BigCorp's Security Awareness and Training Policy. What is done by system staff in this description is much clearer and better than before.

+ + + + + + +

The ISSM ensures staff developing and operating this system handle vulnerability management pretty well. The ISSM commits staff to operational guidelines and procedures based on BigCorp's Vulnerability Management Program Policy and Threat Intelligence Program Policy. What is done by system staff in this description is much clearer and better than before.

+ + + diff --git a/src/examples/ssp/xml/actions/example-request-changes-ssp.xml b/src/examples/ssp/xml/actions/example-request-changes-ssp.xml index 8ce4aa59..2379a263 100644 --- a/src/examples/ssp/xml/actions/example-request-changes-ssp.xml +++ b/src/examples/ssp/xml/actions/example-request-changes-ssp.xml @@ -116,7 +116,7 @@ -

+

Example System, like other BigCorp information systems, uses security controls from a variety of frameworks. Example System is especially focused on NIST SP 800-53 controls.