CCI-000567

The organization disseminates security planning procedures to organization-defined personnel or roles.

Implementation Guidance

DoD disseminates DoDI 8510.01 via the DoD Issuances website (http://www.dtic.mil/whs/directives/corres/dir.html) to organizational personnel with planning responsibilities or information security responsibilities.DoD Components are automatically compliant with this CCI because they are covered by DoD level policy, DoDI 8510.01.DoD has defined the roles as organizational personnel with planning responsibilities or information security responsibilities.

Validation Procedures

DoD Components are automatically compliant with this CCI because they are covered by DoD level policy, DoDI 8510.01.DoD has defined the roles as organizational personnel with planning responsibilities or information security responsibilities.

DISA Compelling Evidence

1. Documented Security Planning Procedure dissemination process/methodology exists. 2. A sampling of personnel and roles who should be receiving the security planning procedures shows that they have the latest version, know how it is disseminated, and can readily access the repository holding the latest version.

The controls below (if any) were marked by NIST as being related to CCI-000567.