The U.S. African Development Foundation's Chief Financial Officer develop and implement a documented process to confirm that security assessment plans are documented for the General Support System that describe the scope of the assessment. At a minimum, this should include the security controls and control enhancements under assessment, and the assessment procedures to be used to determine security control effectiveness as required by the National Institute of Standards and Technology.