CCI-001813

Implementation Guidance

The organization being inspected/assessed documents and implements a process to enforce access restrictions provided by the information system.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the configuration of the information system to ensure access restrictions are implemented.

Compelling Evidence

1.) Documentation of a process to enforce access restrictions