Schritt Implement des NIST RMF: für jede ausgewählte Kontrolle, wie sie umgesetzt ist, wer verantwortlich ist, wo die Nachweise liegen und ihr Status. Nur was Sie beschreiben, wird als umgesetzt festgehalten.
Implementation descriptions — One row per entry, e.g. AC-2; accounts created from HR requests, reviewed quarterly; IT manager; ticket export Q3; Implemented
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
