CCI-002112

Implementation Guidance

The organization being inspected/assessed documents personnel responsible for the management of system accounts.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented appointment of management personnel to ensure that the organization being inspected/assessed has documented personnel responsible for the management of system accounts.

Compelling Evidence

1.) Signed and dated document identifying information system account types. 2.) Signed and dated document which lists and describes all appointed management personnel (name and title), including account managers. 3.) Sample of 2875 identifying supervisor or manager or signed and dated document.