CCI-000271

Ensure the authorizing official for the system authorizes the system to operate before commencing operations.

Implementation Guidance

Determine if before commencing operations, the authorizing official for the system authorizes the system to operate.

Validation Procedures

Examine: [SELECT FROM: Assessment, authorization, and monitoring policy; procedures addressing authorization; system security plan, privacy plan, assessment report, plan of action and milestones; authorization statement; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with authorization responsibilities; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Mechanisms that facilitate authorizations and updates].

The controls below (if any) were marked by NIST as being related to CCI-000271.