Sanction Policy - Required

Agencies must create and document policies that apply sanctions against employees who fail to comply with the agency's Security Policies and Procedures.

Basically you need to create the policies, train employees on the policies and sanctions, and then implement the policies.

The first 3 tasks under the Security management Area of the Administrative section are;

• Perform Risk Analysis
• Document Risk Management Measures
• Create Workforce Sanction Policies