CCI-001826

The organization defines the circumstances upon which the organization reviews the information system changes to determine whether unauthorized changes have occurred.

Implementation Guidance

DoD has defined the circumstances as when there is an incident or when planned changes have been performed.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the circumstances as when there is an incident or when planned changes have been performed.

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-001826.