CCI-003431

CCI-003431 Definition

The organization establishes access requirements for service providers.

Status
Type	CheckType.policy

The organization being inspected/assessed establishes and documents access requirements for service providers.

The organization conducting the inspection/assessment obtains and examines the access requirements established for service providers.

Reference section of documentation for access requirements for service providers.

The controls below (if any) were marked by NIST as being related to CCI-003431.

Control	Description
AR-3	The organization: AR-3a.: Establishes privacy roles, responsibilities, and access requirements for contractors and service providers; and AR-3b.: Includes privacy requirements in contracts and other acquisition-related documents.