BCR-04: Documentation
Control Family:
Control is withdrawn in the next version of this control set and incorporated into: BCR-03: Business Continuity Strategy, BCR-05: Documentation.
Control Statement
Information system documentation (e.g., administrator and user guides, and architecture diagrams) shall be made available to authorized personnel to ensure the following:
- Configuring, installing, and operating the information system
- Effectively using the system’s security features
[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]
Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.