Navigate

CCI-000763

CCI-000763 Definition

Defines a frequency for reviewing and updating the identification and authentication procedures.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the frequency as review annually - update as appropriate.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level.DoD has defined the frequency as review annually - update as appropriate.

Compelling Evidence

Automatically Compliant

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000763.

Control	Description
IA-1	The organization: a: Develops, documents, and disseminates to [one of ]: 1: An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and 2: Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and b: Reviews and updates the current: 1: Identification and authentication policy [one of ]; and 2: Identification and authentication procedures [one of ].

Control

Description

IA-1

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: An identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls; and

b: Reviews and updates the current:
- 1: Identification and authentication policy [one of ]; and
- 2: Identification and authentication procedures [one of ].