CCI-004368

Review and update the policy for Controlled Unclassified Information on an organization-defined frequency.

Implementation Guidance

Determine if: - policy is reviewed and updated [PM-17_ODP[01]; the frequency at which to review and update the policy is defined]. - procedures are reviewed and updated [PM-17_ODP[02]; the frequency at which to review and update the procedures is defined].

Validation Procedures

Examine: [SELECT FROM: Controlled unclassified information policy; controlled unclassified information procedures; other relevant documents or records.]. Interview: [SELECT FROM: Organizational personnel with controlled unclassified information responsibilities; organizational personnel with information security responsibilities.].

The controls below (if any) were marked by NIST as being related to CCI-004368.