Navigate

CCI-000141

CCI-000141 Definition

Make available for expenditure, the planned information security resources.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed documents and implements a process to ensure that information security resources are available for expenditure as planned.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed ensure that information security resources are available for expenditure as planned.

Compelling Evidence

1.) Signed and dated process implementation documentation that is evidence that information security resources are available for expenditure as planned.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000141.

Control	Description
PM-3	The organization: a: Ensures that all capital planning and investment requests include the resources needed to implement the information security program and documents all exceptions to this requirement; b: Employs a business case/Exhibit 300/Exhibit 53 to record the resources required; and c: Ensures that information security resources are available for expenditure as planned.