CCI-000001

The organization develops an access control policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Implementation Guidance

The organization being inspected/assessed develops and documents an access control policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the access control policy to ensure the organization being inspected/assessed develops and documents an access control policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Compelling Evidence

1.) Signed and dated copy of access control policy that defines the purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

The controls below (if any) were marked by NIST as being related to CCI-000001.