CCI-000670

The organization requires that providers of external information system services employ organization-defined security controls in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000670.