CCI-000622

The organization includes the following requirements and/or specifications, explicitly or by reference, in information system acquisition contracts based on an assessment of risk and in accordance with applicable federal laws, Executive Orders, directives.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000622.