CCI-003042

Defines personnel or roles whom external providers are to notify when external personnel who possess organizational credentials and /or badges or who have system privileges are transferred or terminated.

Implementation Guidance

DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for transferring credentials.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for transferring credentials.

Compelling Evidence

Automatically compliant.

The controls below (if any) were marked by NIST as being related to CCI-003042.