CCI-003869

Ensure the authorizing official accepts the use of common controls inherited by the system, before commencing operations.

Implementation Guidance

Determine if before commencing operations, the authorizing official for the system accepts the use of common controls inherited by the system.

Validation Procedures

Examine: [SELECT FROM: Assessment, authorization, and monitoring policy; procedures addressing authorization; system security plan, privacy plan, assessment report, plan of action and milestones; authorization statement; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with authorization responsibilities; organizational personnel with information security and privacy responsibilities]. Test: [SELECT FROM: Mechanisms that facilitate authorizations and updates].

The controls below (if any) were marked by NIST as being related to CCI-003869.