What this code covers
Support services focused on supporting security policies/controls, processes, measuring compliance of relevant legal/compliance requirements, to include Section 508, and responding to security breaches. Also provides support for IT Security systems providing Continuous Diagnostics and Mitigation (CDM) for real-time Cyber Security and protection such as vulnerability scanning, managing firewalls, intrusion prevention systems, and security information and event management (SIEM). Includes Disaster Recovery (DR) services to support DR policy, process and means, dedicated failover facilities and perform DR testing.
Excludes
The implementation actions defined by Compliance policy (e.g. implementing controls like multi-factor authentication) are not included in the Compliance sub-tower and are part of the respective towers where the actions take place (e.g. Compute, Storage, Network, Application, End User).