Navigate

CCI-000763

CCI-000763 Definition

The organization defines a frequency for reviewing and updating the identification and authentication procedures.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the frequency as review annually - update as appropriate.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level.DoD has defined the frequency as review annually - update as appropriate.

Compelling Evidence

Automatically Compliant

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000763.

Control	Description
IA-1	The organization: IA-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: IA-1a.1.: An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and IA-1a.2.: Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and IA-1b.: Reviews and updates the current: IA-1b.1.: Identification and authentication policy [Assignment: organization-defined frequency]; and IA-1b.2.: Identification and authentication procedures [Assignment: organization-defined frequency].

Control

Description

IA-1

The organization:

IA-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:
- IA-1a.1.: An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- IA-1a.2.: Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and

IA-1b.: Reviews and updates the current:
- IA-1b.1.: Identification and authentication policy [Assignment: organization-defined frequency]; and
- IA-1b.2.: Identification and authentication procedures [Assignment: organization-defined frequency].