Navigate

CCI-001458

CCI-001458 Definition

If classified information is found on mobile devices, the incident handling policy is to be followed.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed documents and implements a process to require that if classified information is found on mobile devices, the incident handling policy is followed.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed requires that if classified information is found on mobile devices, the incident handling policy is followed.

Compelling Evidence

1.) Signed and dated Response Plan that describes a process and policy for handling a situation when classified information is found on mobile devices.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001458.

Control	Description
AC-19(4)	The organization: (a): Prohibits the use of unclassified mobile devices in facilities containing information systems processing, storing, or transmitting classified information unless specifically permitted by the authorizing official; and (b): Enforces the following restrictions on individuals permitted by the authorizing official to use unclassified mobile devices in facilities containing information systems processing, storing, or transmitting classified information: (1): Connection of unclassified mobile devices to classified information systems is prohibited; (2): Connection of unclassified mobile devices to unclassified information systems requires approval from the authorizing official; (3): Use of internal or external modems or wireless interfaces within the unclassified mobile devices is prohibited; and (4): Unclassified mobile devices and the information stored on those devices are subject to random reviews and inspections by [organization-defined security officials], and if classified information is found, the incident handling policy is followed. (c): Restricts the connection of classified mobile devices to classified information systems in accordance with [organization-defined security policies].

Control

Description

AC-19(4)

The organization:

(a): Prohibits the use of unclassified mobile devices in facilities containing information systems processing, storing, or transmitting classified information unless specifically permitted by the authorizing official; and

(b): Enforces the following restrictions on individuals permitted by the authorizing official to use unclassified mobile devices in facilities containing information systems processing, storing, or transmitting classified information:
- (1): Connection of unclassified mobile devices to classified information systems is prohibited;
- (2): Connection of unclassified mobile devices to unclassified information systems requires approval from the authorizing official;
- (3): Use of internal or external modems or wireless interfaces within the unclassified mobile devices is prohibited; and
- (4): Unclassified mobile devices and the information stored on those devices are subject to random reviews and inspections by [organization-defined security officials], and if classified information is found, the incident handling policy is followed.

(c): Restricts the connection of classified mobile devices to classified information systems in accordance with [organization-defined security policies].