Navigate

CCI-003036

CCI-003036 Definition

The organization ensures that individuals requiring access to organizational information and information systems re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or in accordance with organization-defined frequency.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed requires that individuals re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or when there is a change to the user's level of access. DoD has defined the frequency as when there is a change to the user's level of access.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines a sampling of re-signed access agreements to ensure the organization being inspected/assessed requires that individuals re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or when there is a change to the user's level of access. DoD has defined the frequency as when there is a change to the user's level of access.

Compelling Evidence

1.) Re-signed access agreements maintaining access to organizational information systems.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003036.

Control	Description
PS-6	The organization: PS-6a.: Develops and documents access agreements for organizational information systems; PS-6b.: Reviews and updates the access agreements [Assignment: organization-defined frequency]; and PS-6c.: Ensures that individuals requiring access to organizational information and information systems: PS-6c.1.: Sign appropriate access agreements prior to being granted access; and PS-6c.2.: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [Assignment: organization-defined frequency].

Control

Description

PS-6

The organization:

PS-6a.: Develops and documents access agreements for organizational information systems;

PS-6b.: Reviews and updates the access agreements [Assignment: organization-defined frequency]; and

PS-6c.: Ensures that individuals requiring access to organizational information and information systems:
- PS-6c.1.: Sign appropriate access agreements prior to being granted access; and
- PS-6c.2.: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [Assignment: organization-defined frequency].