PL-8—Security and Privacy Architectures

Describe the requirements and approach to be taken for protecting the confidentiality, integrity, and availability of organizational information;

Describe the requirements and approach to be taken for processing personally identifiable information to minimize privacy risk to individuals;

Describe how the architectures are integrated into and support the enterprise architecture; and

Describe any assumptions about, and dependencies on, external systems and services;