Navigate

CCI-001477

CCI-001477 Definition

The organization defines a frequency for reviewing the content on the publicly accessible information system for nonpublic information.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the frequency as every 90 days or as new information is posted.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as every 90 days or as new information is posted.

Compelling Evidence

Automatically compliant

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001477.

Control	Description
AC-22	The organization: AC-22a.: Designates individuals authorized to post information onto a publicly accessible information system; AC-22b.: Trains authorized individuals to ensure that publicly accessible information does not contain nonpublic information; AC-22c.: Reviews the proposed content of information prior to posting onto the publicly accessible information system to ensure that nonpublic information is not included; and AC-22d.: Reviews the content on the publicly accessible information system for nonpublic information [Assignment: organization-defined frequency] and removes such information, if discovered.

Control

Description

AC-22

The organization:

AC-22a.: Designates individuals authorized to post information onto a publicly accessible information system;

AC-22b.: Trains authorized individuals to ensure that publicly accessible information does not contain nonpublic information;

AC-22c.: Reviews the proposed content of information prior to posting onto the publicly accessible information system to ensure that nonpublic information is not included; and

AC-22d.: Reviews the content on the publicly accessible information system for nonpublic information [Assignment: organization-defined frequency] and removes such information, if discovered.