CCI-001005

The organization defines personnel or roles from which to restrict access to organization-defined types of digital and/or non-digital media.

Implementation Guidance

The organization being inspected/assessed will define and document personnel or roles to restrict access to media IAW DoD 5200.01-M, CTO 10-133, and CTO 08-001. DoD has determined the personnel or roles are not appropriate to define at the Enterprise level, but personnel must be identified IAW DoD 5200.01-M, CTO 10-133, and CTO 08-001.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented personnel or roles to restrict access to media to ensure the access is granted IAW DoD 5200.01-M, CTO 10-133, and CTO 08-001. DoD has determined the personnel or roles are not appropriate to define at the Enterprise level, but personnel must be identified IAW DoD 5200.01-M, CTO 10-133, and CTO 08-001.

Compelling Evidence

1.) Documentation to ensure that personnel or roles are defined and access for personnel or roles defined are restricted and outlined IAW DoD 5200.01-M, CTO 10-133, and CTO 08-001.

The controls below (if any) were marked by NIST as being related to CCI-001005.