2.5.6.2.9. Cybersecurity Risk Management for DoD IT Systems: In addition, the CDD should identify the system categorization for information systems and Platform IT (PIT) systems as a required capability - the potential impact (low, moderate, or high) resulting from loss of confidentiality, integrity, and availability if a security breach occurs.

2.5.6.2.10. In accordance with the Cyber Survivability Endorsement Implementation Guide, Cyber Survivability Attributes (CSA) associated with the mandatory SS KPP shall be included in Appendix E: CSA Table (Figure B-14).