CCI-003110

The organization defines the security configurations required to be implemented when the developer delivers the information system, system component, or information system service.

Implementation Guidance

DoD has defined the security configurations as security configurations identified by the applicable requirements from DoDI 8510.01 and STIGs/SRGs.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the security configurations as security configurations identified by the applicable requirements from DoDI 8510.01 and STIGs/SRGs.

Compelling Evidence

Automatically compliant per DoDI 8510.01.

The controls below (if any) were marked by NIST as being related to CCI-003110.