CCI-000364

The organization establishes configuration settings for information technology products employed within the information system using organization-defined security configuration checklists.

Implementation Guidance

DoD security configuration or implementation guidance (e.g. STIGs, SRGs, NSA configuration guides, CTOs, DTMs etc) meet the DoD requirement for establishing configuration settings. DoD Components are automatically compliant with this CCI because they are covered by the DoD level security configuration or implementation guidance (e.g. STIGs, SRGs, NSA configuration guides, CTOs, DTMs etc).

Validation Procedures

DoD security configuration or implementation guidance (e.g. STIGs, SRGs, NSA configuration guides, CTOs, DTMs etc) meet the DoD requirement for establishing configuration settings. DoD Components are automatically compliant with this CCI because they are covered by the DoD level security configuration or implementation guidance (e.g. STIGs, SRGs, NSA configuration guides, CTOs, DTMs etc).

Compelling Evidence

Automatically Compliant

The controls below (if any) were marked by NIST as being related to CCI-000364.