CCI-001681

CCI-001681 Definition

The organization defines the frequency at which each form of security control assessment should be conducted.

Status
Type	CheckType.policy

The controls below (if any) were marked by NIST as being related to CCI-001681.

Control	Description
CA-2 (2)	The organization includes as part of security control assessments, [Assignment: organization-defined frequency], [Selection: announced; unannounced], [Selection (one or more): in-depth monitoring; vulnerability scanning; malicious user testing; insider threat assessment; performance/load testing; [Assignment: organization-defined other forms of security assessment]].