CCI-002813

The organization assigns organization-defined personnel or roles with responsibility for responding to information spills.

Implementation Guidance

The organization being inspected/assessed appoints personnel or roles defined in IR-9 (1), CCI 2815 as having the responsibility for responding to information spills.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines appointment letters to ensure the organization being inspected/assessed appoints personnel or roles defined in IR-9 (1), CCI 2815 as having the responsibility for responding to information spills.

Compelling Evidence

1.) Appointment letters that appoint personnel or roles defined in IR-9 (1), CCI 2815 as having the responsibility for responding to information spills.

The controls below (if any) were marked by NIST as being related to CCI-002813.