CCI-002488

The organization employs organization-defined techniques to introduce randomness into organizational assets.

Implementation Guidance

The organization being inspected/assessed employs techniques defined in SC-30 (2), CCI 2486 to introduce randomness into organizational assets.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines any applicable evidence of techniques used to introduce randomness to ensure the organization being inspected/assessed employs techniques defined in SC-30 (2), CCI 2486 to introduce randomness into organizational assets.

Compelling Evidence

1.) Signed and dated Standard Operating Procedure (SOP). 2.) Concept of Operations (CONOP) (reference 'organizational operations and assets' section).

The controls below (if any) were marked by NIST as being related to CCI-002488.