CCI-000594

Include in the rules of behavior, restrictions on the use of social media, social networking sites, and external sites/applications.

Implementation Guidance

The organization being inspected/assessed includes in the rules of behavior, IAW DoDI 8550.01, explicit restrictions on the use of social media/networking sites.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the rules of behavior to ensure the organization being inspected/assessed includes explicit restrictions on the use of social media/networking sites IAW DoDI 8550.01.

Compelling Evidence

1.) System security plan (SSP). 2.) Documented user and employment agreements which include organization defined rules and explicit restrictions on use of social/media networking sites.

The controls below (if any) were marked by NIST as being related to CCI-000594.