CCI-001961

Implementation Guidance

The organization being inspected/assessed defines and documents the lease duration to be assigned to devices. DoD has determined the lease duration is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented lease duration to ensure the organization being inspected/assessed defines the lease duration to be assigned to devices. DoD has determined the lease duration is not appropriate to define at the Enterprise level

Compelling Evidence

1.) Lease documentation that specifies the duration of lease for each information system.