CCI-001900

The organization defines the strength of binding to be applied to the binding of the identity of the information producer with the information.

Implementation Guidance

The organization being inspected/assessed defines and documents the strength of binding and where within the information system it has been implemented, to be applied to the binding of the identity of the information producer with the information. DoD has determined that the strength of binding is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented strength of binding to ensure the organization being inspected/assessed defines the strength of binding and where within the information system it has been implemented, to be applied to the binding of the identity of the information producer with the information. DoD has determined that the strength of binding is not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated audit and accountability policy

The controls below (if any) were marked by NIST as being related to CCI-001900.