CCI-001903

The organization defines the frequency on which the information system is to validate the binding of the information producer identity to the information.

Implementation Guidance

DoD has defined the frequency as according to the tool's capability frequency, but at a minimum, upon first access or hourly in cases of continued access.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as according to the tool's capability frequency, but at a minimum, upon first access or hourly in cases of continued access.

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-001903.