Navigate

CCI-003037

CCI-003037 Definition

The organization defines the frequency for individuals requiring access to organization information and information systems to re-sign access agreements.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the frequency as when there is a change to the user's level of access.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as when there is a change to the user's level of access.

Compelling Evidence

Automatically compliant.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003037.

Control	Description
PS-6	The organization: PS-6a.: Develops and documents access agreements for organizational information systems; PS-6b.: Reviews and updates the access agreements [Assignment: organization-defined frequency]; and PS-6c.: Ensures that individuals requiring access to organizational information and information systems: PS-6c.1.: Sign appropriate access agreements prior to being granted access; and PS-6c.2.: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [Assignment: organization-defined frequency].

Control

Description

PS-6

The organization:

PS-6a.: Develops and documents access agreements for organizational information systems;

PS-6b.: Reviews and updates the access agreements [Assignment: organization-defined frequency]; and

PS-6c.: Ensures that individuals requiring access to organizational information and information systems:
- PS-6c.1.: Sign appropriate access agreements prior to being granted access; and
- PS-6c.2.: Re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or [Assignment: organization-defined frequency].