CCI-001971

Manage system identifiers by receiving authorization from organization-defined personnel or roles to assign an individual, group, role, or device identifier.

Implementation Guidance

The organization being inspected/assessed implements a process to manage information system identifiers by receiving authorization from the ISSM or ISSO to assign an individual, group, role or device identifier. DoD has defined the personnel or roles as the ISSM or ISSO.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation and system configuration information to ensure the organization being inspected/assessed manages information system identifiers by receiving authorization from the ISSM or ISSO to assign an individual, group, role or device identifier. DoD has defined the personnel or roles as the ISSM or ISSO.

Compelling Evidence

1.) Signed and dated Configuration Management Policy, referencing device identification section.

The controls below (if any) were marked by NIST as being related to CCI-001971.