CCI-000613

Establish a discrete line item for information security in organizational programming documentation.

Implementation Guidance

The organization being inspected/assessed identifies and establishes an individual line item for cybersecurity requirements to protect the information system as part of the planning, programming, and budget process (PPBE).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the planning, programming, and budget documentation to ensure the organization being inspected/assessed has identified and established an individual line item for cybersecurity requirements to protect the information system.

Compelling Evidence

1.) Planning, programming and budget process (PPBE) documentation has a discrete individual line item for cybersecurity requirements.

The controls below (if any) were marked by NIST as being related to CCI-000613.