CCI-002267

The organization defines the security attributes that are permitted for organization-defined information systems.

Implementation Guidance

DoD has defined the security attributes as the security attributes defined in AC-16, CCIs 2256-2258.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the security attributes as the security attributes defined in AC-16, CCIs 2256-2258.

Compelling Evidence

Automatically compliant

The controls below (if any) were marked by NIST as being related to CCI-002267.