Security Assessment and Monitoring 03.12.01 Security Assessment 03.12.02 Plan of Action and Milestones 03.12.03 Continuous Monitoring 03.12.05 Information Exchange