An error occurred:
Close sidebar
Xylok
Home Menu
[email protected]
© 2024
Xylok, LLC
Version: v2024.04.1-c0c9-98fb
Xylok
Home Menu
[email protected]
© 2024
Xylok, LLC
Version: v2024.04.1-c0c9-98fb
Open sidebar
Navigate
Top
Description
MAD
Related
CCI-002377
CCI-002377
Definition
The organization documents the system and communications protection policy.
Status
Type
CheckType.policy
Master Assessment Datasheet
Implementation Guidance
Validation Procedures
Compelling Evidence
Related Controls
The controls below (if any) were marked by NIST as being related to
CCI-002377
.
Control
Description
SC-1
The organization:
SC-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:
SC-1a.1.: A system and communications protection policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
SC-1a.2.: Procedures to facilitate the implementation of the system and communications protection policy and associated system and communications protection controls; and
SC-1b.: Reviews and updates the current:
SC-1b.1.: System and communications protection policy [Assignment: organization-defined frequency]; and
SC-1b.2.: System and communications protection procedures [Assignment: organization-defined frequency].