CCI-003164

Defines the personnel to whom security flaw findings and flaw resolution within the system, component, or service are reported.

Implementation Guidance

DoD has defined the personnel as at a minimum, the ISSO and ISSM.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel as at a minimum, the ISSO and ISSM.

Compelling Evidence

Automatically compliant.

The controls below (if any) were marked by NIST as being related to CCI-003164.