Navigate

CCI-001809

CCI-001809 Definition

Monitor software installation policy compliance per an organization-defined frequency.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed must monitor software installation policy compliance at least monthly. The organization must maintain audit trails of monitoring activity. DoD has defined the frequency as at least monthly.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trails of monitoring activities to ensure the organization being inspected/assessed monitors software installation policy compliance at least monthly. DoD has defined the frequency as at least monthly.

Compelling Evidence

1.) Signed and dated configuration management plan

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001809.

Control	Description
CM-11	The organization: a: Establishes [organization-defined policies] governing the installation of software by users; b: Enforces software installation policies through [organization-defined methods]; and c: Monitors policy compliance at [organization-defined frequency].