CCI-003374

The organization documents approval for the continued use of unsupported system components required to satisfy mission/business needs.

Implementation Guidance

The organization being inspected/assessed documents approval for the continued use of unsupported system components required to satisfy mission/business needs.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the hardware and software lists as well as the documented approvals to ensure the organization being inspected/assessed documents approval for the continued use of unsupported system components required to satisfy mission/business needs.

Compelling Evidence

1.) System security plan (SSP). 2.) System development life cycle (SDLC) documentation. 3.) Continuous monitoring plan for documenting approval for the continued use of unsupported system components required to satisfy mission/business needs.

The controls below (if any) were marked by NIST as being related to CCI-003374.