CCI-000601

Defines the frequency with which to review and update the current system and services acquisition policy.

Implementation Guidance

DoD has defined the frequency as every 5 years.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as every 5 years.

Compelling Evidence

Automatically compliant per DoDD 5000.01, DoDI 5000.02, and DoDI 8580.1.

The controls below (if any) were marked by NIST as being related to CCI-000601.