Navigate

CCI-000756

CCI-000756 Definition

The organization develops an identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000756.

Control	Description
IA-1	The organization: a: Develops, documents, and disseminates to [one of ]: 1: An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and 2: Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and b: Reviews and updates the current: 1: Identification and authentication policy [one of ]; and 2: Identification and authentication procedures [one of ].

Control

Description

IA-1

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and

b: Reviews and updates the current:
- 1: Identification and authentication policy [one of ]; and
- 2: Identification and authentication procedures [one of ].