CCI-002305

The organization identifies individuals authorized to define or change the type and value of security attributes available for association with subjects and objects.

Implementation Guidance

The organization being inspected/assessed identifies and documents individuals authorized to define or change the type and value of security attributes available for association with subjects and objects.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented individuals to ensure the organization being inspected/assessed identifies individuals authorized to define or change the type and value of security attributes available for association with subjects and objects.

Compelling Evidence

1.) Signed and dated documentation that identifies individuals (name and title) authorized to define or change the type and value of security attributes available for association with subjects and objects.

The controls below (if any) were marked by NIST as being related to CCI-002305.