CCI-001301

Implementation Guidance

The organization being inspected/assessed documents and implements centrally managed integrity verification tools.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of the use of the identified centrally managed integrity verification tools to ensure the organization being inspected/assessed employs centrally managed integrity verification tools. The organization being inspected/assessed may be required to demonstrate use of their identified integrity verification tools.

Compelling Evidence

1.) Signed and dated System security plan documents the use of the identified centrally managed integrity verification tools to ensure the organization being inspected/assessed employs centrally managed integrity verification tools.