Navigate

CCI-002083

CCI-002083 Definition

The organization reviews and updates Interconnection Security Agreements on an organization-defined frequency.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed reviews and updates Interconnection Security Agreements at least annually. The organization must maintain an audit trail of reviews and updates. DoD has defined the frequency as at least annually.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of reviews and updates to ensure the organization being inspected/assessed reviews and updates Interconnection Security Agreements at least annually. DoD has defined the frequency as at least annually.

Compelling Evidence

1.) Audit trail of reviews and updates to the Interconnection Security Agreements

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002083.

Control	Description
CA-3	The organization: CA-3a.: Authorizes connections from the information system to other information systems through the use of Interconnection Security Agreements; CA-3b.: Documents, for each interconnection, the interface characteristics, security requirements, and the nature of the information communicated; and CA-3c.: Reviews and updates Interconnection Security Agreements [Assignment: organization-defined frequency].

Control

Description

CA-3

The organization:

CA-3a.: Authorizes connections from the information system to other information systems through the use of Interconnection Security Agreements;

CA-3b.: Documents, for each interconnection, the interface characteristics, security requirements, and the nature of the information communicated; and

CA-3c.: Reviews and updates Interconnection Security Agreements [Assignment: organization-defined frequency].