Navigate

CCI-003036

CCI-003036 Definition

The organization ensures that individuals requiring access to organizational information and information systems re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or in accordance with organization-defined frequency.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed requires that individuals re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or when there is a change to the user's level of access. DoD has defined the frequency as when there is a change to the user's level of access.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines a sampling of re-signed access agreements to ensure the organization being inspected/assessed requires that individuals re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or when there is a change to the user's level of access. DoD has defined the frequency as when there is a change to the user's level of access.

Compelling Evidence

1.) Re-signed access agreements maintaining access to organizational information systems.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003036.

Control	Description
PS-6	The organization: a: Develops and documents access agreements for organizational information systems; b: Reviews and updates the access agreements [organization-defined frequency]; and c: Ensures that individuals requiring access to organizational information and information systems: 1: Sign appropriate access agreements prior to being granted access; and 2: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [organization-defined frequency].

Control

Description

PS-6

The organization:

a: Develops and documents access agreements for organizational information systems;

b: Reviews and updates the access agreements [organization-defined frequency]; and

c: Ensures that individuals requiring access to organizational information and information systems:
- 1: Sign appropriate access agreements prior to being granted access; and
- 2: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [organization-defined frequency].