CCI-002300

The organization defines the techniques or technologies to be implemented when associating security attributes with information.

Implementation Guidance

The organization being inspected/assessed defines and documents the techniques or technologies to be implemented when associating security attributes with information. DoD has determined the technique or technologies are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented techniques and technologies to ensure the organization being inspected/assessed defines the techniques or technologies to be implemented when associating security attributes with information. DoD has determined the technique or technologies are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated documentation that documents organization's techniques and technologies. 2.) Signed and dated documentation that describes how the site defines the techniques or technologies to be implemented when associating security attributes with information.

The controls below (if any) were marked by NIST as being related to CCI-002300.