CCI-000036

Implementation Guidance

The organization being inspected/assessed documents and implements processes to maintain separation of the duties defined in AC-5, CCI 2219 across different individuals within the organization.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented processes to ensure the organization being inspected/assessed maintains separation of the duties defined in AC-5, CCI 2219 across different individuals within the organization.

Compelling Evidence

1.) Signed and dated access control policy 2.) Job description documentation 3.) Signed and dated documentation that lists the processes to ensure the organization maintains separation of duties.