Navigate

CCI-000439

CCI-000439 Definition

The organization disseminates a contingency planning policy to organization-defined personnel or roles.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD disseminates DoDI 8500.01 organization-wide via the DoD Issuances website. http://www.dtic.mil/whs/directives/corres/dir.html NIST disseminates NIST SP 800-34 via http://csrc.nist.gov/publications/PubsSPs.html

Validation Procedures

DoD Components are automatically compliant with this CCI because they are covered by the DoD level policy, DoDI 8500.01 and NIST SP 800-34.

Compelling Evidence

Automatically compliant per DoDI 8500.01 and NIST SP 800-34

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000439.

Control	Description
CP-1	The organization: CP-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: CP-1a.1.: A contingency planning policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and CP-1a.2.: Procedures to facilitate the implementation of the contingency planning policy and associated contingency planning controls; and CP-1b.: Reviews and updates the current: CP-1b.1.: Contingency planning policy [Assignment: organization-defined frequency]; and CP-1b.2.: Contingency planning procedures [Assignment: organization-defined frequency].

Control

Description

CP-1

The organization:

CP-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:
- CP-1a.1.: A contingency planning policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- CP-1a.2.: Procedures to facilitate the implementation of the contingency planning policy and associated contingency planning controls; and

CP-1b.: Reviews and updates the current:
- CP-1b.1.: Contingency planning policy [Assignment: organization-defined frequency]; and
- CP-1b.2.: Contingency planning procedures [Assignment: organization-defined frequency].