b. Reviews and updates the information security architecture
Assignment: organization-defined frequency] to reflect updates in the enterprise architecture
PL-8b Parameter Requirement: At least annually.
Data.gov reviews and updates the information security architecture within the System Security plans and the GSA & 18F GitHub repository on an annual basis or when a significant change takes place to reflect updates in the enterprise architecture.
Due to the dynamic and elastic nature of cloud computing, Data.gov & 18F monitors real-time updates of its information security architecture using its infrastructure management and visual security consoles.