When a DOD organization purchases a new system for their network, certain precautions must be taken. They must conduct a risk assessment, identify vulnerabilities, and address acquisition concerns. They must also create a contingency plan in case the system succumbs to a situation like a power outage, natural disaster, or someone accidentally spilling water on it. What document explains why these actions must be completed? DoD Directive 8500.01 DoD Directive 8510.01 OMB Circular No. A-130 NIST SP 800-53