CCI-002101

The organization authorizes internal connections of organization-defined information system components or classes of components to the information system.

Implementation Guidance

The organization being inspected/assessed authorizes internal connections of information system components defined in CA-9, CCI 2102 or classes of components to the information system. The organization must maintain an audit trail of authorizations.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of authorizations to ensure the organization being inspected/assessed authorizes internal connections of information system components defined in CA-9, CCI 2102 or classes of components to the information system.

Compelling Evidence

1.) Audit trail of documentation of authorizations of internal connections of information system components defined in CA-9, CCI 2102 or classes of components to the information system.

The controls below (if any) were marked by NIST as being related to CCI-002101.