Navigate

CCI-001831

CCI-001831 Definition

The organization documents an audit and accountability policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Compelling Evidence

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001831.

Control	Description
AU-1	The organization: AU-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: AU-1a.1.: An audit and accountability policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and AU-1a.2.: Procedures to facilitate the implementation of the audit and accountability policy and associated audit and accountability controls; and AU-1b.: Reviews and updates the current: AU-1b.1.: Audit and accountability policy [Assignment: organization-defined frequency]; and AU-1b.2.: Audit and accountability procedures [Assignment: organization-defined frequency].

Control

Description

AU-1

The organization:

AU-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:
- AU-1a.1.: An audit and accountability policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- AU-1a.2.: Procedures to facilitate the implementation of the audit and accountability policy and associated audit and accountability controls; and

AU-1b.: Reviews and updates the current:
- AU-1b.1.: Audit and accountability policy [Assignment: organization-defined frequency]; and
- AU-1b.2.: Audit and accountability procedures [Assignment: organization-defined frequency].