CCI-000758

Review and update the current identification and authentication policy in accordance with the organization-defined frequency.

Implementation Guidance

DoD reviews and updates identification and authentication policy (DoDI 8520.02 and DoDI 8520.03) annually.DoD Components are automatically compliant with this CCI because they are covered at the DoD level policies, DoDI 8520.02 and DoDI 8520.03.DoD has defined the frequency as reviewed annually - updated as appropriate but at least within 10 years of date of issuance.

Validation Procedures

DoD Components are automatically compliant with this CCI because they are covered by the DoD level policy, DoDI 8520.02 and DoDI 8520.03.DoD has defined the frequency as reviewed annually - updated as appropriate but at least within 10 years of date of issuance.

Compelling Evidence

Automatically compliant per DoDI 8520.02 and DoDI 8520.03

The controls below (if any) were marked by NIST as being related to CCI-000758.