SA-2: Allocation Of Resources
|SA-2a.||Determines information security requirements for the information system or information system service in mission/business process planning;|
|SA-2b.||Determines, documents, and allocates the resources required to protect the information system or information system service as part of its capital planning and investment control process; and|
|SA-2c.||Establishes a discrete line item for information security in organizational programming and budgeting documentation.|
Resource allocation for information security includes funding for the initial information system or information system service acquisition and funding for the sustainment of the system/service.