CCI-002851

Implementation Guidance

The organization being inspected/assessed defines and documents the backup information that requires dual authorization for deletion or destruction. DoD has determined the backup information is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented backup information to ensure the organization being inspected/assessed defines the backup information that requires dual authorization for deletion or destruction. DoD has determined the backup information is not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated contingency plan, referencing section which defines the backup information that requires dual authorization for deletion or destruction.