Specifications include, but are not limited to: Establish a Communications Plan
DWSS and the Vendor will establish a mutually acceptable Communications Plan to include types of communications and schedule of planned communications to be exchanged between parties. This plan will include the Weekly Status Report as part of the plan.
Weekly Status Reports
The SAR vendor shall provide a weekly status report to DWSS, including ongoing assessment findings categorized by severity rating. DWSS may at its discretion request a status report meeting with relevant stakeholders in lieu of a printed status report.
Assessment Project Plan
The SAR vendor shall, in coordination with DWSS develop a detailed plan to assess the security and privacy controls detailed in Attachment M – Framework for the Independent Assessment.
Security Assessment Report Review
The SAR vendor must review the completed SAR with DWSS staff. This will include the SAR and any other supporting documentation .
Recommendations report with DWSS staff. This will include review of the POAM and any other supporting documentation for remediation documentation.