These plans should show how the agency will verify that the acquired equipment, software, or services meet user needs and satisfy security requirements.
The agency's plans will be extensive and go into great detail to create a peace of mind for the users. 