An error occurred:

© 2025 Xylok, LLC

Version: features-advanced-collector-898c2c - rmfrev4

Navigate

CCI-000241

CCI-000241 Definition

Review and update the current assessment, authorization, and monitoring policy on an organization-defined frequency.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000241.

Control

Description

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: A security assessment and authorization policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the security assessment and authorization policy and associated security assessment and authorization controls; and

b: Reviews and updates the current:
- 1: Security assessment and authorization policy [one of ]; and
- 2: Security assessment and authorization procedures [one of ].