CCI-002276

The organization identifies the individuals authorized to define the value of associated security attributes.

Implementation Guidance

The organization being inspected/assessed identifies and documents the individuals authorized to define the value of associated security attributes.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented individuals to ensure the organization being inspected/assessed identifies the individuals authorized to define the value of associated security attributes.

Compelling Evidence

1.) Signed and dated documentation that identifies the individuals authorized to define the value of associated security attributes.

The controls below (if any) were marked by NIST as being related to CCI-002276.