CCI-002764

The organization defines non-persistent information system components and services to be implemented.

Implementation Guidance

The organization being inspected/assessed defines and documents non-persistent information system components and services to be implemented. DoD has determined the information system components and services are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented information system components and services to ensure the organization being inspected/assessed defines non-persistent information system components and services to be implemented. DoD has determined the information system components and services are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated System security plan defines non-persistent information system components and services to be implemented.

The controls below (if any) were marked by NIST as being related to CCI-002764.