Navigate

CCI-001637

CCI-001637 Definition

The organization reviews and updates the current security planning policy in accordance with organization-defined frequency.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoDI 8510.01 meets the requirements for a security planning policy. DoD Components are automatically compliant with this CCI because they are covered by DoD level policy, DoDI 8510.01.DoD has defined the frequency as every 5 years.

Validation Procedures

Compelling Evidence

Automatically compliant per DoDI 8510.01.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001637.

Control	Description
PL-1	The organization: PL-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: PL-1a.1.: A security planning policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and PL-1a.2.: Procedures to facilitate the implementation of the security planning policy and associated security planning controls; and PL-1b.: Reviews and updates the current: PL-1b.1.: Security planning policy [Assignment: organization-defined frequency]; and PL-1b.2.: Security planning procedures [Assignment: organization-defined frequency].

Control

Description

PL-1

The organization:

PL-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:
- PL-1a.1.: A security planning policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- PL-1a.2.: Procedures to facilitate the implementation of the security planning policy and associated security planning controls; and

PL-1b.: Reviews and updates the current:
- PL-1b.1.: Security planning policy [Assignment: organization-defined frequency]; and
- PL-1b.2.: Security planning procedures [Assignment: organization-defined frequency].