System Security Plans (SS-08-028)

Requires data and system owners to create and maintain system security plans

Systems Operations Documentation (SS-08-027)

Requires agencies to document system operational procedures