CCI-001866

The organization defines the data/information to be collected from other sources to enhance its ability to identify inappropriate or unusual activity.

Implementation Guidance

The organization being inspected/assessed defines and documents the data/information to be collected from other sources to enhance its ability to identify inappropriate or unusual activity. If no additional data/information is to be collected, that should also be documented. DoD has determined that the data/information is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documented data/information from other sources to ensure the information has been defined. DoD has determined that the data/information is not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated audit and accountability policy and/or procedures

The controls below (if any) were marked by NIST as being related to CCI-001866.