The agency's plans will be extensive and go into great detail to create a peace of mind for the users. 
These plans should show how the agency will verify that the acquired equipment, software, or services meet user needs and satisfy security requirements.