CCI-000232

The organization documents and provides supporting rationale in the security plan for the information system, user actions not requiring identification and authentication.

Implementation Guidance

The organization being inspected/assessed documents supporting rationale in the security plan for the actions defined in AC-14, CCI 61 to not require identification and authentication.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the security plan to ensure the organization being inspected/assessed documents the supporting rationale for the actions defined in AC-14, CCI 61 to not require identification and authentication.

DISA Compelling Evidence

1) View signed and dated documentation that defines the supporting rationale in the security plan for the actions defined in AC-14, CCI 61 to not require identification and authentication.

The controls below (if any) were marked by NIST as being related to CCI-000232.