CCI-001467

The organization prohibits authorized individuals from using an external information system to process organization-controlled information except in situations where the organization can verify the implementation of required security controls on the external system as specified in the organization's information security policy and security plan.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-001467.