CCI-002497

The organization employs organization-defined techniques to hide or conceal organization-defined information system components.

Implementation Guidance

The organization being inspected/assessed employs techniques defined in SC-30 (5), CCI 2495 to hide or conceal information system components defined in SC-30 (5), CCI 2496.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines any applicable evidence of techniques to conceal information to ensure the organization being inspected/assessed employs techniques defined in SC-30 (5), CCI 2495 to hide or conceal information system components defined in SC-30 (5), CCI 2496.

Compelling Evidence

1.) Signed and dated System Security Plan (SSP). 2.) Standard Operating Procedure (SOP) document (reference "security techniques and processes" section).

The controls below (if any) were marked by NIST as being related to CCI-002497.