CCI-000676

The organization conducts an organizational assessment of risk prior to the acquisition of dedicated information security services.

Implementation Guidance

Validation Procedures

The controls below (if any) were marked by NIST as being related to CCI-000676.