Navigate

CCI-001217

CCI-001217 Definition

Develop and document an organization-level; mission/business process-level; and/or system level system and information integrity policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001217.

Control	Description
SI-1	The organization: a: Develops, documents, and disseminates to [one of ]: 1: A system and information integrity policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and 2: Procedures to facilitate the implementation of the system and information integrity policy and associated system and information integrity controls; and b: Reviews and updates the current: 1: System and information integrity policy [one of ]; and 2: System and information integrity procedures [one of ].

Control

Description

SI-1

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: A system and information integrity policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the system and information integrity policy and associated system and information integrity controls; and

b: Reviews and updates the current:
- 1: System and information integrity policy [one of ]; and
- 2: System and information integrity procedures [one of ].