Navigate

CCI-001930

CCI-001930 Definition

Defines the personnel or roles to whom the organization-level; mission/business process-level; and/or system-level audit and accountability policy is to be disseminated.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001930.

Control	Description
AU-1	The organization: a: Develops, documents, and disseminates to [one of ]: 1: An audit and accountability policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and 2: Procedures to facilitate the implementation of the audit and accountability policy and associated audit and accountability controls; and b: Reviews and updates the current: 1: Audit and accountability policy [one of ]; and 2: Audit and accountability procedures [one of ].

Control

Description

AU-1

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: An audit and accountability policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the audit and accountability policy and associated audit and accountability controls; and

b: Reviews and updates the current:
- 1: Audit and accountability policy [one of ]; and
- 2: Audit and accountability procedures [one of ].