A company has purchased a new system, but security personnel are spending a great deal of time
on system maintenance. A new third party vendor has been selected to maintain and manage the
company’s system. Which of the following document types would need to be created before any
work is performed?

The security administrator of a small private firm is researching and putting together a proposal to
purchase an IPS to replace an existing IDS. A specific brand and model has been selected, but
the security administrator needs to gather various cost information for that product. Which of the
following documents would perform a cost analysis report and include information such as
payment terms?

A security administrator of a large private firm is researching and putting together a proposal to
purchase an IPS. The specific IPS type has not been selected, and the security administrator
needs to gather information from several vendors to determine a specific product. Which of the
following documents would assist in choosing a specific brand and model?