CCI-001514

The organization reviews and updates position risk designations in accordance with organization-defined frequency.

Implementation Guidance

The organization being inspected/assessed reviews position risk designations annually and revises designations as required based on the reviews. Records of these reviews must be maintained as an audit trail. DoD has defined the frequency as annually.

Validation Procedures

The organization conducting the inspection/assessment reviews the audit records of the position designation reviews to ensure reviews are done annually. DoD has defined the frequency as annually.

Compelling Evidence

1.) SOP/TTP documentation designating frequency of reviews and updates to position risk designations.

The controls below (if any) were marked by NIST as being related to CCI-001514.