CCI-000005

Disseminate procedures to facilitate the implementation of the organization-level; mission/business process-level; and/or system-level access control policy and associated access controls to the organization-defined personnel or roles.

Implementation Guidance

The organization being inspected/assessed disseminates via an information sharing capability to all personnel the procedures to facilitate access control policy and associated access controls. DoD has defined the personnel or roles as all personnel.

Validation Procedures

The organization conducting the inspection/assessment examines the procedures to facilitate access control policy and associated access controls via the organization's information sharing capability to ensure the organization being inspected/assessed disseminates the procedures to all personnel. DoD has defined the personnel or roles as all personnel.

Compelling Evidence

1.) Signed and dated access control policy. 2.) Signed and dated documentation that defines the procedures to disseminate the access control policy. 3.) Signed and dated records of dissemination of access control policy.

The controls below (if any) were marked by NIST as being related to CCI-000005.