CCI-001380

The organization documents separation of duties of individuals.

Implementation Guidance

The organization being inspected/assessed documents separation of duties of individuals.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented separation of duties to ensure the organization being inspected/assessed documents separation of duties of individuals.

DISA Compelling Evidence

1) Provide copy of access control policy 2) Job description documentation 3) Provide signed and dated documentation that define the separation of duties of individuals

The controls below (if any) were marked by NIST as being related to CCI-001380.