... Swanson Marianne and Federal Computer Security Program Managers’ Forum Working 3. Group, Guide for Developing Security Plans for Information Technology Systems, NIST Special Publication 800-18, ... Foundation, Control Objectives for Information and Related Technology (COBIT), 3rd Edition, July 2000. 7. Office of Information and Instructional Technology, Information Technology, 2003. 8. ... Provide additional background or other relevant information Define enforcement Define how policies will be enforced by documenting the following information: • Identify personnel who are authorized...