CCI-004694

Include the allocation of responsibility or identification of parties responsible for information security, explicitly or by reference, using standardized contract language; and/or organization-defined contract language in the acquisition contract for the information system, system component, or information system service.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-004694.