CCI-003868

Assign a senior official as the authorizing official for common controls available for inheritance by organizational systems.

Implementation Guidance

Determine if a senior official is assigned as the authorizing official for common controls available for inheritance by Organizational systems.

Validation Procedures

Examine: [SELECT FROM: Assessment, authorization, and monitoring policy; procedures addressing authorization; system security plan, privacy plan, assessment report, plan of action and milestones; authorization statement; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with authorization responsibilities; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Mechanisms that facilitate authorizations and updates].

The controls below (if any) were marked by NIST as being related to CCI-003868.