Master Assessment Datasheet
The organization being inspected/assessed documents and implements processes to maintain separation of the duties defined in AC-5, CCI 2219 across different individuals within the organization.
The organization conducting the inspection/assessment obtains and examines the documented processes to ensure the organization being inspected/assessed maintains separation of the duties defined in AC-5, CCI 2219 across different individuals within the organization.
DISA Compelling Evidence
1) Provide copy of access control policy 2) Job description documentation 3) Provide signed and dated documentation that lists the processes to ensure the organization maintains separation of duties.