Navigate

CCI-001473

CCI-001473 Definition

Designate individuals authorized to post information onto a publicly accessible system.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed identifies and documents individuals authorized to post information onto a publicly accessible information system.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the list of individuals to ensure the organization being inspected/assessed designates individuals authorized to post information onto a publicly accessible information system.

Compelling Evidence

1.) List of individuals authorized to post information onto a publicly accessible information system 2.) Signed and dated system security plan (SSP)

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001473.

Control	Description
AC-22	The organization: a: Designates individuals authorized to post information onto a publicly accessible information system; b: Trains authorized individuals to ensure that publicly accessible information does not contain nonpublic information; c: Reviews the proposed content of information prior to posting onto the publicly accessible information system to ensure that nonpublic information is not included; and d: Reviews the content on the publicly accessible information system for nonpublic information [organization-defined frequency] and removes such information, if discovered.

Control

Description

AC-22

The organization:

a: Designates individuals authorized to post information onto a publicly accessible information system;

b: Trains authorized individuals to ensure that publicly accessible information does not contain nonpublic information;

c: Reviews the proposed content of information prior to posting onto the publicly accessible information system to ensure that nonpublic information is not included; and

d: Reviews the content on the publicly accessible information system for nonpublic information [organization-defined frequency] and removes such information, if discovered.