CCI-003089

Defines the personnel or roles to whom the organization-level; mission/business process-level; and/or system-level system and services acquisition policy is disseminated.

Implementation Guidance

DoD has defined the personnel or roles as all personnel.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as all personnel.

Compelling Evidence

Automatically compliant per DoDD 5000.01, DoDI 5000.02, and DoDI 8580.1.

The controls below (if any) were marked by NIST as being related to CCI-003089.