Determine if systems security operations and maintenance activities are property documented and updated