Navigate

CCI-001175

CCI-001175 Definition

The organization authorizes the use of VoIP within the information system.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed authorizes any appropriate usage of VoIP within the information system and documents those authorizations.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented authorizations and *insert language* to ensure the organization being inspected/assessed authorizes any appropriate usage of VoIP within the information system and documents those authorizations.

Compelling Evidence

1.) System protection policy. 2.) Communications protection policy (reference VoIP section).

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001175.

Control	Description
SC-19	The organization: SC-19a.: Establishes usage restrictions and implementation guidance for Voice over Internet Protocol (VoIP) technologies based on the potential to cause damage to the information system if used maliciously; and SC-19b.: Authorizes, monitors, and controls the use of VoIP within the information system.