CCI-002345

Implementation Guidance

The organization being inspected/assessed defines and documents the data storage objects that are to be protected against data mining attempts. DoD has determined the data storage objects are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented data storage objects to ensure the organization being inspected/assessed defines the data storage objects that are to be protected against data mining attempts. DoD has determined the data storage objects are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated system security plan (SSP)/standard operating procedure (SOP) or concept of operations (CONOP) that defines and describes the data storage objects that are to be protected against data mining attempts.