CCI-001830

The organization reevaluates information system privileges per an organization-defined frequency.

Implementation Guidance

The organization being inspected/assessed reevaluates information system privileges every 90 days . The organization must maintain the reevaluations as an audit trail. DoD has defined the frequency as every 90 days.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of reviews to ensure the organization being inspected/assessed reevaluates information system privileges every 90 days. DoD has defined the frequency as every 90 days.

Compelling Evidence

1.) Signed and dated documentation that defines a process to reevaluate information system privileges every 90 days 2.) Audit trail of reviews

The controls below (if any) were marked by NIST as being related to CCI-001830.