CCI-003375

The organization provides justification for the continued use of unsupported system components required to satisfy mission/business needs.

Implementation Guidance

The organization being inspected/assessed documents justification for the continued use of unsupported system components required to satisfy mission/business needs.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented justification as well as the hardware and software lists to ensure the organization being inspected/assessed provides justification for the continued use of unsupported system components required to satisfy mission/business needs.

Compelling Evidence

1.) System security plan (SSP). 2.) System development life cycle (SDLC) documentation. 3.) Continuous monitoring plan for providing justification for the continued use of unsupported system components required to satisfy mission/business needs.

The controls below (if any) were marked by NIST as being related to CCI-003375.