CCI-000216

The organization develops and documents a critical infrastructure and key resource protection plan that addresses information security issues.

Implementation Guidance

DoDD 3020.40 meets the DoD requirement for the development of a critical infrastructure and key resource protection plan. DoD components are automatically compliant with this CCI as they are covered by the DoD level, DoDD 3020.40.

Validation Procedures

DoDD 3020.40 meets the DoD requirement for the development of a critical infrastructure and key resource protection plan. DoD components are automatically compliant with this CCI as they are covered by the DoD level, DoDD 3020.40.

Compelling Evidence

Automatically compliant per DoDD 3020.40.

The controls below (if any) were marked by NIST as being related to CCI-000216.