Navigate

CCI-001933

CCI-001933 Definition

The organization defines the personnel or roles to be recipients of the identification and authentication policy and the procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001933.

Control	Description
IA-1	The organization: a: Develops, documents, and disseminates to [one of ]: 1: An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and 2: Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and b: Reviews and updates the current: 1: Identification and authentication policy [one of ]; and 2: Identification and authentication procedures [one of ].

Control

Description

IA-1

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and

b: Reviews and updates the current:
- 1: Identification and authentication policy [one of ]; and
- 2: Identification and authentication procedures [one of ].