Why should detailed system security procedures be stored in a library instead of attached as appendices to a system security plan?
a) Authorization Officials do not appreciate being sent lengthy documents.
b) When detailed procedures are attached to the SSP, they can lead to confusion caused by blending operational and management information.
c) To implement configuration control and prevent unauthorized changes to the system security procedures.
d) The procedures library is easier to secure than the SSP.