CCI-000595

Include in the rules of behavior, restrictions on posting organizational information on public websites.

Implementation Guidance

The organization being inspected/assessed includes in the rules of behavior, IAW DoDI 8550.01, explicit restrictions on posting organizational information on public websites.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the rules of behavior to ensure the organization being inspected/assessed includes explicit restrictions on posting organizational information on public websites IAW DoDI 8550.01.

Compelling Evidence

1.) System security plan (SSP). 2.) Documented user and employment agreements which include organization defined rules and explicit restrictions on what organization information can be posted on public websites.

The controls below (if any) were marked by NIST as being related to CCI-000595.