CCI-000270

The organization assigns a senior-level executive or manager as the authorizing official for the information system.

Implementation Guidance

The organization being inspected/assessed will assign a senior-level executive or manager as the official role, and the responsibility, for authorizing the information system(s). Assignment must be in writing and IAW with DoDI 8510.01 (i.e. Appointment memorandum).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the written appointment memorandum.

Compelling Evidence

1.) Appointment letter appointing a senior level executive or manager as the authorizing official for the information system.

The controls below (if any) were marked by NIST as being related to CCI-000270.