Implementation Plan Template - CMS

Office of Information and Technology (OIT) system owners must develop ISCPs for IS services ranked high after the ISCPA. The Critical Exposure report, as shown in Table 1, is the culmination of the ISCPA process, in that it uses data and values gathered and assigned during the process to produce the IS exposure description for each IS service. ................
................