Organizations that work with government agencies are often required to have a system security plan -- a document that catalogs the security activities and controls for IT systems and applications. An ...