This section contains operator procedures. Use it only after the organization has approved the target, method, verification level, reporting requirement, and failure response.
Every production operation should have a named operator, an authorization source, a reviewed target manifest, an approved configuration, and a defined evidence destination.