CCI-001975

Manage system identifiers by preventing reuse of identifiers for an organization-defined time period.

Implementation Guidance

The organization being inspected/assessed implements a process for information system identifiers to prevent reuse of identifiers for 1 year for user identifiers (DoD is not going to specify value for device identifier). DoD has defined the time period as 1 year for user identifiers (DoD is not going to specify value for device identifier).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation or system configuration information to ensure the organization being inspected/assessed prevents the reuse of identifiers for 1 year for user identifiers (DoD is not going to specify value for device identifier). DoD has defined the time period as 1 year for user identifiers (DoD is not going to specify value for device identifier).

Compelling Evidence

1.) Signed and dated Configuration Management Policy, referencing device identification section.

The controls below (if any) were marked by NIST as being related to CCI-001975.