CCI-003280

The organization defines the personnel or roles to whom the outputs of the tools and results of the vulnerability analysis are delivered.

Implementation Guidance

DoD has defined the personnel or roles as the ISSO, ISSM, and PM.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as the ISSO, ISSM, and PM.

Compelling Evidence

Automatically compliant.

The controls below (if any) were marked by NIST as being related to CCI-003280.