This activity establishes the Security plan. It defines and creates an appropriate security infrastructure and procedures, translates actions in the plan to security directives, and communicates them. The Security Plan also requests changes in the environment to realize the Security plan.