CCI-002693

The organization defines the elements within the organization to whom the organization will disseminate security alerts, advisories, and directives.

Implementation Guidance

DoD has determined the elements are not applicable as elements are not selected as recipients of security alerts, advisories and directives.

Validation Procedures

DoD has determined the elements are not applicable as elements are not selected as recipients of security alerts, advisories and directives.

Compelling Evidence

1.) Signed and dated System security plan documents which organization defined elements are authorized to receive security notifications.. 2.) List of personnel with access to communication logs.

The controls below (if any) were marked by NIST as being related to CCI-002693.