CCI-002276

The organization identifies the individuals authorized to define the value of associated security attributes.

Implementation Guidance

The organization being inspected/assessed identifies and documents the individuals authorized to define the value of associated security attributes.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented individuals to ensure the organization being inspected/assessed identifies the individuals authorized to define the value of associated security attributes.

DISA Compelling Evidence

1) View signed and dated documentation that defines the individuals authorized to define the value of associated security attributes.

The controls below (if any) were marked by NIST as being related to CCI-002276.