Navigate

CCI-001533

CCI-001533 Definition

The organization defines the frequency with which to review and update access agreements for organizational information systems.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the frequency as annually.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as annually.

Compelling Evidence

Automatically compliant.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001533.

Control	Description
PS-6	The organization: PS-6a.: Develops and documents access agreements for organizational information systems; PS-6b.: Reviews and updates the access agreements [Assignment: organization-defined frequency]; and PS-6c.: Ensures that individuals requiring access to organizational information and information systems: PS-6c.1.: Sign appropriate access agreements prior to being granted access; and PS-6c.2.: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [Assignment: organization-defined frequency].

Control

Description

PS-6

The organization:

PS-6a.: Develops and documents access agreements for organizational information systems;

PS-6b.: Reviews and updates the access agreements [Assignment: organization-defined frequency]; and

PS-6c.: Ensures that individuals requiring access to organizational information and information systems:
- PS-6c.1.: Sign appropriate access agreements prior to being granted access; and
- PS-6c.2.: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [Assignment: organization-defined frequency].