An error occurred:

© 2025 Xylok, LLC

Version: features-advanced-collector-898c2c - rmfrev4

Navigate

CCI-000671

CCI-000671 Definition

The organization defines government oversight with regard to external information system services.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000671.

Control

Description

The organization:

a: Requires that providers of external information system services comply with organizational information security requirements and employ [one of ] in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance;

b: Defines and documents government oversight and user roles and responsibilities with regard to external information system services; and

c: Employs [one of ] to monitor security control compliance by external service providers on an ongoing basis.