Navigate

CCI-003840

CCI-003840 Definition

Defines the additional actions to be taken if an information disclosure is discovered.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if [AU-13_ODP[04]; additional actions to be taken if an information disclosure is discovered are defined] are taken if an information disclosure is discovered.

Validation Procedures

Examine: [SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing information disclosure monitoring; system design documentation; system configuration settings and associated documentation; monitoring records; system audit records; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with responsibilities for monitoring open-source information and/or information sites; organizational personnel with security and privacy responsibilities]. Test: [SELECT FROM: Mechanisms implementing monitoring for information disclosure].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003840.

Control	Description
AU-13	a: Monitor [open-source information and/or information sites to be monitored for evidence of unauthorized disclosure of organizational information is/are defined;] [the frequency with which open-source information and/or information sites are monitored for evidence of unauthorized disclosure of organizational information is defined;] for evidence of unauthorized disclosure of organizational information; and b: If an information disclosure is discovered: 1: Notify [personnel or roles to be notified if an information disclosure is discovered is/are defined;] ; and 2: Take the following additional actions: [additional actions to be taken if an information disclosure is discovered are defined;].

Control

Description

AU-13

a: Monitor [open-source information and/or information sites to be monitored for evidence of unauthorized disclosure of organizational information is/are defined;] [the frequency with which open-source information and/or information sites are monitored for evidence of unauthorized disclosure of organizational information is defined;] for evidence of unauthorized disclosure of organizational information; and

b: If an information disclosure is discovered:
- 1: Notify [personnel or roles to be notified if an information disclosure is discovered is/are defined;] ; and
- 2: Take the following additional actions: [additional actions to be taken if an information disclosure is discovered are defined;].