CCI-000036

The organization separates organization-defined duties of individuals.

Implementation Guidance

The organization being inspected/assessed documents and implements processes to maintain separation of the duties defined in AC-5, CCI 2219 across different individuals within the organization.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented processes to ensure the organization being inspected/assessed maintains separation of the duties defined in AC-5, CCI 2219 across different individuals within the organization.

DISA Compelling Evidence

1) Provide copy of access control policy 2) Job description documentation 3) Provide signed and dated documentation that lists the processes to ensure the organization maintains separation of duties.

The controls below (if any) were marked by NIST as being related to CCI-000036.