CCI-001746

The organization ensures that cryptographic mechanisms used to provide organization-defined security safeguards are under configuration management.

Implementation Guidance

The organization being inspected/assessed ensures that cryptographic mechanisms used to provide all security safeguards are under configuration management. DoD has defined the security safeguards as all security safeguards.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the configuration management policy to ensure that cryptographic mechanisms used to provide all security safeguards are documented in the policy. DoD has defined the security safeguards as all security safeguards.

Compelling Evidence

1.) Signed and dated Configuration management policy which documents the cryptographic mechanisms used to provide all security safeguards

The controls below (if any) were marked by NIST as being related to CCI-001746.