CCI-000244

Review and update the current assessment, authorization, and monitoring procedures on an organization-defined frequency.

Implementation Guidance

The organization being inspected/assessed reviews and updates, IAW DoDI 8510.01, the current security assessment and authorization procedures annually. The organization must maintain an audit trail of review and update activity. DoD has defined the frequency as annually.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of review and update activity to ensure the organization being inspected/assessed reviews and updates, IAW DoDI 8510.01, the current security assessment and authorization procedures annually.

Compelling Evidence

1.) SOP/TTP documenting the review and update activity to ensure the organization reviews and updates the current security assessment and authorization procedures annually IAW DoDI 8510.01. 2.) Audit trail of updates.

The controls below (if any) were marked by NIST as being related to CCI-000244.