CCI-002070

Develop a control assessment plan that describes the scope of the assessment including assessment team, and assessment roles and responsibilities.

Implementation Guidance

The organization being inspected/assessed lists their assessment team members and their associated assessment roles and responsibilities in the security assessment plan.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the security assessment plan to ensure the organization being inspected/assessed lists their assessment team members and their associated assessment roles and responsibilities in the security assessment plan.

Compelling Evidence

1.) Signed and dated Security Assessment Plan which lists assessment team members and their associated assessment roles and responsibilities

The controls below (if any) were marked by NIST as being related to CCI-002070.