Navigate

CCI-002261

CCI-002261 Definition

Defines security attribute values associated with organization-defined types of security attributes for information in transmission.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed defines and documents the security attributes values associated with organization-defined types of security attributes for information in transmission. DoD has determined the security attribute values are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented security attribute values to ensure the organization being inspected/assessed defines security attribute values associated with organization-defined types of security attributes for information in transmission. DoD has determined the security attribute values are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated documentation that defines the security attributes values associated with organization-defined types of security attributes for information in transmission.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002261.

Control	Description
AC-16	The organization: a: Provides the means to associate [organization-defined types of security attributes] having [organization-defined security attribute values] with information in storage, in process, and/or in transmission; b: Ensures that the security attribute associations are made and retained with the information; c: Establishes the permitted [organization-defined security attributes] for [organization-defined information systems]; and d: Determines the permitted [organization-defined values or ranges] for each of the established security attributes.

Control

Description

AC-16

The organization:

a: Provides the means to associate [organization-defined types of security attributes] having [organization-defined security attribute values] with information in storage, in process, and/or in transmission;

b: Ensures that the security attribute associations are made and retained with the information;

c: Establishes the permitted [organization-defined security attributes] for [organization-defined information systems]; and

d: Determines the permitted [organization-defined values or ranges] for each of the established security attributes.