Navigate

CCI-003035

CCI-003035 Definition

Develop and document access agreements for organizational systems.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed develops and documents access agreements for organizational information systems.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented access agreements to ensure the organization being inspected/assessed develops and documents access agreements for organizational information systems.

Compelling Evidence

1.) User Agreements to ensure organization develops and documents access agreements for organizational information systems.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003035.

Control	Description
PS-6	The organization: a: Develops and documents access agreements for organizational information systems; b: Reviews and updates the access agreements [organization-defined frequency]; and c: Ensures that individuals requiring access to organizational information and information systems: 1: Sign appropriate access agreements prior to being granted access; and 2: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [organization-defined frequency].

Control

Description

PS-6

The organization:

a: Develops and documents access agreements for organizational information systems;

b: Reviews and updates the access agreements [organization-defined frequency]; and

c: Ensures that individuals requiring access to organizational information and information systems:
- 1: Sign appropriate access agreements prior to being granted access; and
- 2: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [organization-defined frequency].