5. Resource Prioritization

RESOURCE PRIORITIZATION

This has six subcomponent steps to plan, identify gaps and prioritize resources:

a) Define applicable statutory, regulatory and contractual obligations (including DFARS, FAR, NIST 800-171 and CMMC);

b) Perform a gap assessment from applicable statutory, regulatory and contractual obligations;

c) Develop & implement policies and standards to address applicable statutory, regulatory and contractual obligations;

d) Identify the necessary People, Processes & Technology (PPT) that are necessary and appropriately sized;

e) Develop & implement a resource plan (e.g., business plan, budget, road map, etc.) to meet compliance obligations; and

f) Prioritize objectives from the resource plan for PPT requirements. POA&M any deficiencies from this phase.