A company has purchased a new system, but security personnel is spending a great deal of time on system maintenance. A new third-party vendor has been selected to maintain and manage the company’s system. Which of the following document types would need to be created before any work is performed?

The CASP+ certification is suited to professionals who want to be immersed in technology as a practitioner, while the CISSP is suited for those who want to be in management or move into management. The CISSP focuses on management strategies, practices and principles.