CCI-000325

Use organization-defined automated mechanisms to prohibit changes to the system until designated approvals are received.

Implementation Guidance

The organization being inspected/assessed documents and employs the automated mechanisms to prohibit changes to the information system until designated approvals are received.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of the use of the identified automated mechanisms to ensure that the identified system prohibits changes. The organization being inspected/assessed may be required to demonstrate use of their identified automated mechanisms.

Compelling Evidence

1.) Documentation of the use of the identified automated mechanisms

The controls below (if any) were marked by NIST as being related to CCI-000325.