CCI-001789

The organization receives an acknowledgement from the information system owner of the assignment of the acquired information system components to an information system.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to ensure the organization receives an acknowledgement from the information system owner of the assignment of the acquired information system components to an information system. The organization must maintain an audit trail of the acknowledgements.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process and audit trail of acknowledgements to ensure the organization being inspected/assessed receives an acknowledgement from the information system owner of the assignment of the acquired information system components to an information system.

Compelling Evidence

1.) Documentation of a process to ensure the organization receives an acknowledgement from the information system owner of the assignment of the acquired information system components to an information system 2.) Audit trail of the acknowledgments

The controls below (if any) were marked by NIST as being related to CCI-001789.